Known vulnerabilities in MicroSCADA X SYS600

Vendor: Hitachi Energy
Software: MicroSCADA X SYS600
Software CPE: cpe:2.3:a:hitachi_energy:microscada_x_sys600:*:*:*:*:*:*:*:*
Website: https://www143.abb.com/SoftwareLibrary
Total vulnerabilities: 28
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MicroSCADA X SYS600 MicroSCADA X SYS600 is affected by 28 known vulnerabilities: 4 high, 17 medium, 7 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112170 - Improper Validation of Integrity Check Value
CVE-2025-39203		 CWE-354 Medium
No
No
 10.7 04.07.2025 SB2025070408
#VU112168 - Improper Certificate Validation
CVE-2025-39205		 CWE-295 Medium
No
No
 10.7 04.07.2025 SB2025070408
#VU112167 - Exposure of sensitive information to an unauthorized actor
CVE-2025-39204		 CWE-200 Medium
No
No
 10.7 04.07.2025 SB2025070408
#VU112164 - External Control of File Name or Path
CVE-2025-39202		 CWE-73 Low
No
No
 10.7 04.07.2025 SB2025070408
#VU112163 - Incorrect Default Permissions
CVE-2025-39201		 CWE-276 Low
No
No
 10.7 04.07.2025 SB2025070408
#VU100990 - Missing Authentication for Critical Function
CVE-2024-7940		 CWE-306 High
No
No
 10.6 27.11.2024 SB2024112733
#VU100989 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-7941		 CWE-601 Low
No
No
 10.6 27.11.2024 SB2024112733
#VU100988 - Authentication Bypass by Capture-replay
CVE-2024-3982		 CWE-294 Low
No
No
 10.6 27.11.2024 SB2024112733
#VU100987 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-3980		 CWE-22 Low
No
No
 10.6 27.11.2024 SB2024112733
#VU100985 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2024-4872		 CWE-943 Medium
No
No
 10.6 27.11.2024 SB2024112733
#VU76369 - Permissions, Privileges, and Access Controls
CVE-2011-1207		 CWE-264 Low
No
No
 10.2 19.05.2023 SB2023051926
#VU69735 - Improper input validation
CVE-2022-3388		 CWE-20 Low
No
No
 9.4 FP2 Hotfix 5, 10.4.1 30.11.2022 SB2022113006
#VU67894 - Improper Handling of Unexpected Data Type
CVE-2022-29922		 CWE-241 Medium
No
No
 10.4 04.10.2022 SB2022100417
#VU67892 - Improper Access Control
CVE-2022-29492		 CWE-284 Medium
No
No
 10.4 04.10.2022 SB2022100417
#VU67891 - Improper Privilege Management
CVE-2022-29490		 CWE-269 Medium
No
No
 10.4 04.10.2022 SB2022100417
#VU67890 - Improper input validation
CVE-2022-2277		 CWE-20 Medium
No
No
 10.4 04.10.2022 SB2022100417
#VU67889 - Improper input validation
CVE-2022-1778		 CWE-20 Medium
No
No
 10.4 04.10.2022 SB2022100417
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 10.4 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU48143 - NULL Pointer Dereference
CVE-2020-25692		 CWE-476 Medium
No
No
 10.4 04.11.2020 SB2020110407
SB2020110408
SB2020121028
and 10 more
#VU47218 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-8201		 CWE-444 High
No
No
 10.3 18.09.2020 SB2020091028
SB2020091029
SB2020100608
and 12 more


Showing elements 1 - 20 out of 28