Hitachi Energy Microscada Sys600
6 CVEs affecting Hitachi Energy Microscada Sys600. Latest disclosed: 2026-09-03. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-7940 | High | 8.3 | 2024-08-27 | The product exposes a service that is intended for local only to all network interfaces without any authentication. |
CVE-2024-3982 | High | 8.2 | 2024-08-27 | An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a s… |
CVE-2026-9854 | High | 7.8 | 2026-09-03 | A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the… |
CVE-2026-9853 | High | 7.8 | 2026-09-03 | A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify applicati… |
CVE-2026-9852 | High | 7.8 | 2026-09-03 | A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in so… |
CVE-2024-7941 | Medium | 4.3 | 2024-08-27 | An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the URL value to a mal… |