Approved changes feed: RSS · Atom

cpe:2.3:a:hitachienergy:microscada_x_sys600:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHitachienergy (2cd248c7-aee9-59a5-80aa-6fb18cc538ff)
ProductMicroscada X Sys600 (6c2572fa-9405-57c1-b776-74e21f7ab876)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-39205 vulnerable 2026-06-08 07:23:06.407497 Details available
MEDIUM (6.5)
A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-the-Middle attack due to missing proper validation.
Published: 2025-06-24T12:13:20.791Z
Updated: 2025-10-01T14:58:20.730Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39204 vulnerable 2026-06-08 07:23:06.406908 Details available
MEDIUM (6.5)
A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering query in the Web interface can be malformed, so returning data can leak unauthorized information to the user.
Published: 2025-06-24T12:01:09.855Z
Updated: 2025-06-25T12:42:14.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39203 vulnerable 2026-06-08 07:23:06.400462 Details available
MEDIUM (6.5)
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from IED or remote system can cause a denial of service resulting in disconnection loop.
Published: 2025-06-24T11:57:04.229Z
Updated: 2025-10-07T10:00:29.745Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39202 vulnerable 2026-06-08 07:23:06.399897 Details available
HIGH (7.3)
A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product. An authenticated user with low privileges can see and overwrite files causing information leak and data corruption.
Published: 2025-06-24T11:51:58.576Z
Updated: 2025-06-25T12:42:25.143Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39201 vulnerable 2026-06-08 07:23:06.399293 Details available
MEDIUM (6.1)
A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system file, making denial of Notify service.
Published: 2025-06-24T11:46:11.548Z
Updated: 2025-06-25T12:42:30.293Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7940 vulnerable 2026-06-08 06:58:23.988181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4872 vulnerable 2026-06-08 06:50:18.832047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3982 vulnerable 2026-06-08 06:43:52.038875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3980 vulnerable 2026-06-08 06:43:52.033974 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2277 vulnerable 2026-06-08 05:43:35.188243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29922 vulnerable 2026-06-08 05:42:49.825838 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29492 vulnerable 2026-06-08 05:42:48.087615 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29490 vulnerable 2026-06-08 05:42:48.061679 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1778 vulnerable 2026-06-08 05:39:13.895330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.