Known vulnerabilities in MicroSCADA Pro SYS600

Vendor: Hitachi Energy
Software: MicroSCADA Pro SYS600
Software CPE: cpe:2.3:a:hitachi_energy:microscada_pro_sys600:*:*:*:*:*:*:*:*
Website: https://www143.abb.com/SoftwareLibrary
Total vulnerabilities: 23
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MicroSCADA Pro SYS600 MicroSCADA Pro SYS600 is affected by 23 known vulnerabilities: 3 high, 16 medium, 4 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112170 - Improper Validation of Integrity Check Value
CVE-2025-39203		 CWE-354 Medium
No
No
 10.7 04.07.2025 SB2025070408
#VU112168 - Improper Certificate Validation
CVE-2025-39205		 CWE-295 Medium
No
No
 10.7 04.07.2025 SB2025070408
#VU112167 - Exposure of sensitive information to an unauthorized actor
CVE-2025-39204		 CWE-200 Medium
No
No
 10.7 04.07.2025 SB2025070408
#VU112164 - External Control of File Name or Path
CVE-2025-39202		 CWE-73 Low
No
No
 10.7 04.07.2025 SB2025070408
#VU112163 - Incorrect Default Permissions
CVE-2025-39201		 CWE-276 Low
No
No
 10.7 04.07.2025 SB2025070408
#VU76369 - Permissions, Privileges, and Access Controls
CVE-2011-1207		 CWE-264 Low
No
No
 10.2 19.05.2023 SB2023051926
#VU69735 - Improper input validation
CVE-2022-3388		 CWE-20 Low
No
No
 9.4 FP2 Hotfix 5, 10.4.1 30.11.2022 SB2022113006
#VU67894 - Improper Handling of Unexpected Data Type
CVE-2022-29922		 CWE-241 Medium
No
No
 10.4 04.10.2022 SB2022100417
#VU67892 - Improper Access Control
CVE-2022-29492		 CWE-284 Medium
No
No
 10.4 04.10.2022 SB2022100417
#VU67891 - Improper Privilege Management
CVE-2022-29490		 CWE-269 Medium
No
No
 10.4 04.10.2022 SB2022100417
#VU67890 - Improper input validation
CVE-2022-2277		 CWE-20 Medium
No
No
 10.4 04.10.2022 SB2022100417
#VU67889 - Improper input validation
CVE-2022-1778		 CWE-20 Medium
No
No
 10.4 04.10.2022 SB2022100417
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 10.4 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU49254 - Use After Free
CVE-2020-8265		 CWE-416 Medium
No
No
 10.3 04.01.2021 SB2021010419
SB2021010704
SB2021010705
and 33 more
#VU49253 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-8287		 CWE-444 Medium
Available
No
 10.3 04.01.2021 SB2021010419
SB2021010706
SB2021010707
and 33 more
#VU48143 - NULL Pointer Dereference
CVE-2020-25692		 CWE-476 Medium
No
No
 10.4 04.11.2020 SB2020110407
SB2020110408
SB2020121028
and 10 more
#VU47218 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-8201		 CWE-444 High
No
No
 10.3 18.09.2020 SB2020091028
SB2020091029
SB2020100608
and 12 more
#VU47248 - Buffer overflow
CVE-2020-8252		 CWE-120 High
No
No
 10.3 18.09.2020 SB2020100117
SB2020091824
SB2020091825
and 19 more
#VU46573 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1968		 CWE-200 Medium
No
No
 10.3 10.09.2020 SB2020091011
SB2020121720
SB2021012078
and 22 more
#VU28537 - Improper Authorization
CVE-2020-8172		 CWE-285 Medium
No
No
 10.3 03.06.2020 SB2020060305
SB2020060364
SB2020060365
and 9 more


Showing elements 1 - 20 out of 23