--- title: "Hitachi Energy MicroSCADA X SYS600 vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/hitachi-energy/microscada-x-sys600 type: product description: "Hitachi Energy MicroSCADA X SYS600 has 20 published CVEs, 0 in CISA KEV and 0 with public exploits." updated: 2026-09-03 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Hitachi Energy MicroSCADA X SYS600 vulnerabilities Vendor: [Hitachi Energy](https://radicalnotion.ai/vendor/hitachi-energy) - **Published CVEs:** 20 - **In CISA KEV:** 0 - **With a public exploit:** 0 - **With a patch:** 16 - **Average CVSS:** 7.8 - **First CVE:** 2022-09-12 - **Latest CVE:** 2026-09-03 - **Platforms:** sys600 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 3 | | High | 14 | | Medium | 3 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 3 | | [CWE-303](https://radicalnotion.ai/cwe/cwe-303) | Incorrect Implementation of Authentication Algorithm | 2 | | [CWE-1284](https://radicalnotion.ai/cwe/cwe-1284) | Improper Validation of Specified Quantity in Input | 1 | | [CWE-200](https://radicalnotion.ai/cwe/cwe-200) | Exposure of Sensitive Information to an Unauthorized Actor | 1 | | [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 1 | | [CWE-269](https://radicalnotion.ai/cwe/cwe-269) | Improper Privilege Management | 1 | | [CWE-276](https://radicalnotion.ai/cwe/cwe-276) | Incorrect Default Permissions | 1 | | [CWE-1236](https://radicalnotion.ai/cwe/cwe-1236) | Improper Neutralization of Formula Elements in a CSV File | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2022 | 6 | | 2023 | 1 | | 2024 | 5 | | 2025 | 5 | | 2026 | 3 | ## Affected versions (top 31 of 51) | Version | Kind | CVEs | | --- | --- | --- | | 10.2 | exact | 5 | | 10.2.1 | exact | 5 | | 10.3 | exact | 5 | | 10.3.1 | exact | 5 | | 10 | exact | 4 | | 10.1 | exact | 4 | | 10.1.1 | exact | 4 | | SYS600 10 | exact | 1 | | SYS600 10.1 | exact | 1 | | SYS600 10.1.1 | exact | 1 | | SYS600 10.2 | exact | 1 | | SYS600 10.2.1 | exact | 1 | | 10.0 \<= v \< 10.6 | range | 3 | | 10.0 \<= v \< 10.7 | range | 3 | | 10.0 \<= v \<= 10.6 | range | 3 | | 10.0 \<= v \<= 10.3.1 | range | 2 | | 10.0 \<= v \<= 10.5 | range | 2 | | 10.0 \<= v \<= 10.7 | range | 2 | | 9.0 \<= v \< 10.4 | range | 2 | | \>= 10.0 | range | 1 | | \>= 10.3 vulnerability patch 2025\_01 | range | 1 | | \>= 10.4 vulnerability patch 2025\_01 | range | 1 | | \>= 10.5 vulnerability patch 2025\_01 | range | 1 | | \>= SYS600 10.4.1 | range | 1 | | 10.7 | patched | 5 | | 10.6 | patched | 4 | | 10.4 | patched | 2 | | 10.3 vulnerability patch 2025\_01 | patched | 1 | | 10.4 vulnerability patch 2025\_01 | patched | 1 | | 10.5 vulnerability patch 2025\_01 | patched | 1 | | SYS600 10.4.1 | patched | 1 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2026-9854 | - | high | 8.5 | No | No | No | | CVE-2026-9853 | - | high | 8.5 | No | No | No | | CVE-2026-9852 | - | medium | 4.6 | No | No | No | | CVE-2025-39205 | - | high | 7.1 | No | No | Yes | | CVE-2025-39204 | - | high | 8.5 | No | No | Yes | | CVE-2025-39203 | - | high | 7.1 | No | No | Yes | | CVE-2025-39202 | - | high | 8.3 | No | No | Yes | | CVE-2025-39201 | - | medium | 6.9 | No | No | Yes | | CVE-2024-7941 | - | medium | 4.3 | No | No | No | | CVE-2024-7940 | - | critical | 9.8 | No | No | Yes | | CVE-2024-3982 | - | high | 8.2 | No | No | Yes | | CVE-2024-3980 | - | critical | 9.9 | No | No | Yes | | CVE-2024-4872 | - | critical | 9.9 | No | No | Yes | | CVE-2022-3353 | IEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products | high | 7.5 | No | No | Yes | | CVE-2022-3388 | Input Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products | high | 8.8 | No | No | Yes | | CVE-2022-29492 | A vulnerability exists in the handling of a malformed IEC 104 TCP packet. Upon receiving a malformed IEC 104 TCP packet, the malformed packet is dropped, however the TCP connection is left open. This may cause a denial-of-service if the affected conne ... | high | 7.5 | No | No | Yes | | CVE-2022-1778 | A vulnerability exists during the start of the affected SYS600, where an input validation flaw causes a buffer-overflow while reading a specific configuration file. Subsequently SYS600 will fail to start. The configuration file can only be accessed by ... | high | 7.5 | No | No | Yes | | CVE-2022-29922 | A vulnerability exists in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server. The vulnerability may cause a denial-of-service on the IEC 61850 OPC Server part of the SYS ... | high | 7.5 | No | No | Yes | | CVE-2022-2277 | A vulnerability exists in the ICCP stack of the affected SYS600 versions due to validation flaw in the process that establishes the ICCP communication. The validation flaw will cause a denial-of-service when ICCP of SYS600 is request to forward any da ... | high | 7.5 | No | No | Yes | | CVE-2022-29490 | A vulnerability exists in the Workplace X WebUI in which an authenticated user is able to execute any MicroSCADA internal scripts irrespective of the authenticated user's role. | high | 8.8 | No | No | Yes | ## Frequently asked questions ### How many CVEs does Hitachi Energy MicroSCADA X SYS600 have? Hitachi Energy MicroSCADA X SYS600 has 20 published CVE records since 2022. ### How many Hitachi Energy MicroSCADA X SYS600 CVEs are in CISA KEV? None of Hitachi Energy MicroSCADA X SYS600's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for Hitachi Energy MicroSCADA X SYS600 vulnerabilities? No Hitachi Energy MicroSCADA X SYS600 CVEs currently have a tracked public exploit in this dataset. ### Which versions of Hitachi Energy MicroSCADA X SYS600 are affected? 51 distinct Hitachi Energy MicroSCADA X SYS600 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in Hitachi Energy MicroSCADA X SYS600 CVEs? Hitachi Energy MicroSCADA X SYS600's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-303 (Incorrect Implementation of Authentication Algorithm), CWE-1284 (Improper Validation of Specified Quantity in Input), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). ### How many critical Hitachi Energy MicroSCADA X SYS600 vulnerabilities are there? Hitachi Energy MicroSCADA X SYS600 has 3 critical and 14 high-severity CVEs. ### What is the average severity of Hitachi Energy MicroSCADA X SYS600 CVEs? The average CVSS base score across Hitachi Energy MicroSCADA X SYS600's scored CVEs is 7.8. ## Other products from this vendor - [eSOMS](https://radicalnotion.ai/vendor/hitachi-energy/esoms) (19 CVEs) - [FOXMAN-UN](https://radicalnotion.ai/vendor/hitachi-energy/foxman-un) (15 CVEs) - [UNEM](https://radicalnotion.ai/vendor/hitachi-energy/unem) (15 CVEs) - [RTU500](https://radicalnotion.ai/vendor/hitachi-energy/rtu500) (13 CVEs) - [RTU500 series CMU firmware](https://radicalnotion.ai/vendor/hitachi-energy/rtu500-series-cmu-firmware) (13 CVEs) - [Asset Suite](https://radicalnotion.ai/vendor/hitachi-energy/asset-suite) (8 CVEs) - [MicroSCADA SYS600](https://radicalnotion.ai/vendor/hitachi-energy/microscada-sys600) (8 CVEs) - [relion 670](https://radicalnotion.ai/vendor/hitachi-energy/relion-670) (8 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/hitachi-energy/microscada-x-sys600). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.