Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.1

MicroSCADA X SYS600: Denial of Service via Malicious Power Grid Messages

CVE-2025-39203 · published 1 year ago
Summary

A vulnerability in the MicroSCADA X SYS600 system can be exploited by sending special types of messages to the system, which can cause it to disconnect. This could lead to a disruption in power grid operations. To mitigate this risk, users should ensure they follow best practices for secure communication protocols and consider updating their system to the latest version.

What to do
  • Update hitachienergy microscada_x_sys600 to version 10.7 or later.
Affected software
VendorProductAffected versions
hitachienergy microscada_x_sys600 >= 10.5, < 10.7
cpe:2.3:a:hitachienergy:microscada_x_sys600:*:*:*:*:*:*:*:*
Original advisory text
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from IED or remote system can cause a denial of service resulting in disconnection...
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from IED or remote system can cause a denial of service resulting in disconnection loop.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
7.1 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-354Improper Validation of Integrity Check Value
Timeline
Published24 Jun 2025
Updated29 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-39203 · NVD
Track software like this
Free during beta