EUVD-2026-70320
GHSA-9hq3-8gr4-57hv
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local OS session required (AV:L), low privilege OS account sufficient (PR:L), no complexity or interaction needed; C/I/A all High consistent with full SCADA object read-write in critical infrastructure.
Primary rating from Vendor (Hitachi Energy).
CVSS VectorVendor: Hitachi Energy
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without being authenticated to the SYS600 system itself.
Only the SYS600 system users should be permitted to view and modify application objects.
AnalysisAI
Broken application-layer authentication in Hitachi Energy MicroSCADA SYS600 allows any user with an operating system account on the hosting server to read and modify SYS600 application objects without possessing SYS600 credentials. Because the application relies on OS-level authentication rather than enforcing its own access controls (CWE-303), the SYS600 authentication boundary is effectively bypassed for all local OS users. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid operating system account on the physical or virtual server hosting the MicroSCADA SYS600 application - this is the sole prerequisite. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H) scores 8.5 and accurately characterizes local, low-privilege exploitation with full read/write impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the Hitachi Energy advisory at https://publisher.hitachienergy.com/preview?DocumentID=8DBD000249&LanguageCode=en&DocumentPartId=&Action=Launch for specific patched versions and upgrade instructions, as no exact fix version was included in the available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all SYS600 installations and document every OS user account and service account with server access; immediately escalate to Hitachi Energy for emergency patch timeline and temporary mitigation guidance. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Microscada Sys600
View allPrivilege escalation in Hitachi Energy MicroSCADA SYS600 allows any user with access to the engineering tools to elevate
CSV injection (CWE-1236) in Hitachi Energy MicroSCADA SYS600 allows attackers who can write arbitrary entries to the Not
Share
External POC / Exploit Code
Leaving vuln.today