How many Hitachi Energy MicroSCADA X SYS600 CVEs are in CISA KEV?

None of Hitachi Energy MicroSCADA X SYS600's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Hitachi Energy MicroSCADA X SYS600 are affected?

51 distinct Hitachi Energy MicroSCADA X SYS600 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Hitachi Energy MicroSCADA X SYS600 CVEs?

Hitachi Energy MicroSCADA X SYS600's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-303 (Incorrect Implementation of Authentication Algorithm), CWE-1284 (Improper Validation of Specified Quantity in Input), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).

How many critical Hitachi Energy MicroSCADA X SYS600 vulnerabilities are there?

Hitachi Energy MicroSCADA X SYS600 has 3 critical and 14 high-severity CVEs.

What is the average severity of Hitachi Energy MicroSCADA X SYS600 CVEs?

The average CVSS base score across Hitachi Energy MicroSCADA X SYS600's scored CVEs is 7.8.

Hitachi Energy MicroSCADA X SYS600 Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Hitachi Energy MicroSCADA X SYS600 vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Overview

Hitachi Energy MicroSCADA X SYS600 has 20 published CVE records since 2022, of which none are in CISA's KEV catalog and none have a known public exploit. The average CVSS base score across scored CVEs is 7.8. Affected platforms include sys600.

Severity and exploitation

How the CVSS severity of Hitachi Energy MicroSCADA X SYS600's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High14

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Hitachi Energy MicroSCADA X SYS600's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No Hitachi Energy MicroSCADA X SYS600 CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Hitachi Energy MicroSCADA X SYS600 version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions12 most-used of 15

10.25 CVEs
10.2.15 CVEs
10.35 CVEs
10.3.15 CVEs
104 CVEs
10.14 CVEs
10.1.14 CVEs
SYS600 101 CVE
SYS600 10.11 CVE
SYS600 10.1.11 CVE
SYS600 10.21 CVE
SYS600 10.2.11 CVE

Version ranges12 most-used of 29

10.0 <= v < 10.63 CVEs
10.0 <= v < 10.73 CVEs
10.0 <= v <= 10.63 CVEs
10.0 <= v <= 10.3.12 CVEs
10.0 <= v <= 10.52 CVEs
10.0 <= v <= 10.72 CVEs
9.0 <= v < 10.42 CVEs
>= 10.01 CVE
>= 10.3 vulnerability patch 2025_011 CVE
>= 10.4 vulnerability patch 2025_011 CVE

Fixed in

10.75 CVEs
10.64 CVEs
10.42 CVEs
10.3 vulnerability patch 2025_011 CVE
10.4 vulnerability patch 2025_011 CVE
10.5 vulnerability patch 2025_011 CVE
SYS600 10.4.11 CVE

Find a version

Showing the 40 most-used of 51 versions. Search to find any version.

20 CVEs

Sort

High vulnerability · 2026-09-03
CVE-2026-9854CWE-303
High · CVSS 8.5
EPSS 0.1% (4th pct)2026-09-03
High vulnerability · 2026-09-03
CVE-2026-9853CWE-303
High · CVSS 8.5
EPSS 0.1% (4th pct)2026-09-03
Medium vulnerability · 2026-09-03
CVE-2026-9852CWE-1236
Medium · CVSS 4.6
EPSS 0.2% (11th pct)2026-09-03
High vulnerability · 2025-06-24
CVE-2025-39205
Patch
CWE-295
High · CVSS 7.1
EPSS 0.2% (10th pct)2025-06-24
High vulnerability · 2025-06-24
CVE-2025-39204
Patch
CWE-200
High · CVSS 8.5
EPSS 0.4% (31th pct)2025-06-24
High vulnerability · 2025-06-24
CVE-2025-39203
Patch
CWE-354
High · CVSS 7.1
EPSS 0.2% (14th pct)2025-06-24
High vulnerability · 2025-06-24
CVE-2025-39202
Patch
CWE-269
High · CVSS 8.3
EPSS 0.2% (14th pct)2025-06-24
Medium vulnerability · 2025-06-24
CVE-2025-39201
Patch
CWE-276
Medium · CVSS 6.9
EPSS 0.1% (3th pct)2025-06-24
Medium vulnerability · 2024-08-27
CVE-2024-7941CWE-601
Medium · CVSS 4.3
EPSS 0.3% (27th pct)2024-08-27
Critical vulnerability · 2024-08-27
CVE-2024-7940
Patch
CWE-306
Critical · CVSS 9.8
EPSS 0.6% (48th pct)2024-08-27
High vulnerability · 2024-08-27
CVE-2024-3982
Patch
CWE-294
High · CVSS 8.2
EPSS 0.2% (12th pct)2024-08-27
Critical vulnerability · 2024-08-27
CVE-2024-3980
Patch
CWE-22
Critical · CVSS 9.9
EPSS 0.6% (50th pct)2024-08-27
Critical vulnerability · 2024-08-27
CVE-2024-4872
Patch
CWE-943
Critical · CVSS 9.9
EPSS 0.5% (43th pct)2024-08-27
IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products
CVE-2022-3353
Patch
Workaround
CWE-404
High · CVSS 7.5
EPSS 1.1% (66th pct)2023-02-21
Input Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products
CVE-2022-3388
Patch
Workaround
CWE-20
High · CVSS 8.8
EPSS 0.3% (23th pct)2022-11-21
A vulnerability exists in the handling of a malformed IEC 104 TCP packet. Upon receiving a malformed IEC 104 TCP packet, the malformed packet is dropped, however the TCP connection is left open. This may cause a denial-of-service if the affected conne ...
CVE-2022-29492
Patch
Workaround
CWE-20
High · CVSS 7.5
EPSS 0.8% (56th pct)2022-09-14
A vulnerability exists during the start of the affected SYS600, where an input validation flaw causes a buffer-overflow while reading a specific configuration file. Subsequently SYS600 will fail to start. The configuration file can only be accessed by ...
CVE-2022-1778
Patch
Workaround
CWE-119
High · CVSS 7.5
EPSS 0.5% (42th pct)2022-09-14
A vulnerability exists in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server. The vulnerability may cause a denial-of-service on the IEC 61850 OPC Server part of the SYS ...
CVE-2022-29922
Patch
Workaround
CWE-20
High · CVSS 7.5
EPSS 0.8% (57th pct)2022-09-14
A vulnerability exists in the ICCP stack of the affected SYS600 versions due to validation flaw in the process that establishes the ICCP communication. The validation flaw will cause a denial-of-service when ICCP of SYS600 is request to forward any da ...
CVE-2022-2277
Patch
Workaround
CWE-1284
High · CVSS 7.5
EPSS 0.8% (56th pct)2022-09-14
A vulnerability exists in the Workplace X WebUI in which an authenticated user is able to execute any MicroSCADA internal scripts irrespective of the authenticated user's role.
CVE-2022-29490
Patch
Workaround
CWE-285
High · CVSS 8.8
EPSS 0.7% (51th pct)2022-09-12

Common weakness types

The CWE weakness categories most often found in Hitachi Energy MicroSCADA X SYS600 CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Hitachi Energy MicroSCADA X SYS600 CVEs were published each year.

2022

2023

2024

2025

2026

Other Hitachi Energy products

Browse vulnerabilities for other products by Hitachi Energy.

eSOMS19 CVEs FOXMAN-UN15 CVEs UNEM15 CVEs RTU50013 CVEs RTU500 series CMU firmware13 CVEs Asset Suite8 CVEs MicroSCADA SYS6008 CVEs

Frequently asked questions

Common questions about Hitachi Energy MicroSCADA X SYS600 vulnerabilities.

How many CVEs does Hitachi Energy MicroSCADA X SYS600 have?: Hitachi Energy MicroSCADA X SYS600 has 20 published CVE records since 2022.
How many Hitachi Energy MicroSCADA X SYS600 CVEs are in CISA KEV?: None of Hitachi Energy MicroSCADA X SYS600's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Hitachi Energy MicroSCADA X SYS600 vulnerabilities?: No Hitachi Energy MicroSCADA X SYS600 CVEs currently have a tracked public exploit in this dataset.
Which versions of Hitachi Energy MicroSCADA X SYS600 are affected?: 51 distinct Hitachi Energy MicroSCADA X SYS600 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Hitachi Energy MicroSCADA X SYS600 CVEs?: Hitachi Energy MicroSCADA X SYS600's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-303 (Incorrect Implementation of Authentication Algorithm), CWE-1284 (Improper Validation of Specified Quantity in Input), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
How many critical Hitachi Energy MicroSCADA X SYS600 vulnerabilities are there?: Hitachi Energy MicroSCADA X SYS600 has 3 critical and 14 high-severity CVEs.
What is the average severity of Hitachi Energy MicroSCADA X SYS600 CVEs?: The average CVSS base score across Hitachi Energy MicroSCADA X SYS600's scored CVEs is 7.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Hitachi Energy MicroSCADA X SYS600 vulnerabilities

Get an alert for each new Hitachi Energy MicroSCADA X SYS600 CVE, with AI-written analysis and remediation steps.

Create an account See pricing