CVE-2025-39205 — Hitachi Energy / MicroSCADA X SYS600

CVE-2025-39205

Hitachi Energy / MicroSCADA X SYS600 PUBLISHED

Description (CNA)

A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-the-Middle attack due to missing proper validation.

Affected (CNA)

Vendor / product	Versions
Hitachi Energy / MicroSCADA X SYS600	affected 10.3 through 10.6

CWE

CWE-295

References

https://publisher.hitachienergy.com/preview?DocumentID=8DBD000218&LanguageCode=en&DocumentPartId=&Action=Launch

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.