Hitachi Energy MicroSCADA X SYS600 Product
Plan PatchCVSS 7.8ICS-CERT ICSA-26-293-04Sep 1, 2026
Hitachi EnergyEnergy
Attack path
Attack VectorLocal
Auth RequiredLow
ComplexityLow
User InteractionNone needed
Summary
Hitachi Energy is aware of multiple vulnerabilities that affect MicroSCADA X SYS600 product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
What this means
What could happen
Could allow full system compromise — read data, modify settings, and disrupt operations
Who's at risk
Organizations in energy using Hitachi Energy equipment
How it could be exploited
Attacker would need local or console access to the device with basic access credentials. The attack is straightforward with no special conditions
Exploitability
Unlikely to be exploited — EPSS score 0.2%
Affected products (2)
1 with fix1 pending
ProductAffected VersionsFix Status
MicroSCADA X SYS600≤ 10.710.8
MicroSCADA X SYS60010.8No fix yet
Remediation & Mitigation
0/4
Do now — compensating controls
0/2WORKAROUNDFollow general mitigation factors/workarounds
WORKAROUNDFollow mitigation strategy. Refer to MicroSCADA X SYS00 10.8 Installation and Administration Manual, Section 2.1.7.5 (Mitigation strategy is available for versions 10.3 onwards). Also refer to MicroSCADA X 10.8 Cybersecurity Deployment Guide
Schedule — requires maintenance window
0/2Patching may require device reboot — plan for process interruption
UPGRADEUpdate to version 10.8
UPGRADEUpdate to version 10.8 and Follow mitigation strategy. Refer to MicroSCADA X SYS00 10.8 Installation and Administration Manual, Section 2.1.7.5 (Mitigation strategy is available for versions 10.3 onwards). Also refer to MicroSCADA X 10.8 Cybersecurity Deployment Guide
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/dbb84a2b-6408-4071-af56-a2c98721a39aGet OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.