Hitachi Energy Vulnerabilities Plague SCADA Power Systems

Hitachi Energy disclosed five vulnerabilities in its MicroSCADA X SYS600 product (used in over 10,000 substations and critical infrastructure) and urges immediate upgrading to version 10.6; two flaws carry near-maximum CVSS scores (9.9) enabling SQL injection and argument/file access, others allow authentication bypass, exposure of local services, and open-redirects—no active exploitation was reported but the potential impact on grid availability, integrity, and confidentiality is significant.