Hitachi Energy MicroSCADA X SYS600 Product

Hitachi Energy and CISA republishes an advisory detailing multiple high-severity vulnerabilities in MicroSCADA X SYS600 (versions <= 10.7 and 10.8) — including CSV injection (data exfiltration/execution risk), authentication/authorization flaws that allow unauthorized object modification, and RBAC weaknesses enabling local privilege escalation to Windows administrator. The advisory affects energy-sector ICS deployments worldwide, assigns CVSS v3 score 7.8 for at least one issue, and recommends updating to version 10.8 and applying vendor mitigation guidance; researchers at Sandia reported the issues.