Skip to content
Sign in
8.5 High

CVE-2022-29490 Improper Authorization vulnerability exists in the Workplace X WebUI of the Hitachi Energy MicroSCADA X SYS600 allows an…

Description

Improper Authorization vulnerability exists in the Workplace X WebUI of the Hitachi Energy MicroSCADA X SYS600 allows an authenticated user to execute any MicroSCADA internal scripts irrespective of the authenticated user's role. This issue affects: Hitachi Energy MicroSCADA X SYS600 version 10 to version 10.3.1. cpe:2.3:a:hitachienergy:microscada_x_sys600:10:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:*

Affected products and versions

Product Affected versions Fixed in
MicroSCADA X SYS600 10.3 10.3 → 10.3.1 No fix stated
MicroSCADA X SYS600 10.2 10.2 → 10.2.1 No fix stated
MicroSCADA X SYS600 10.1 10.1 → 10.1.1 No fix stated
MicroSCADA X SYS600 10 No fix stated

Other CVEs of MicroSCADA X SYS600

The 14 CVEs of MicroSCADA X SYS600 →
CVE-2025-39205 A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product 6.5 Medium CVE-2025-39204 A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product 8.5 High CVE-2025-39203 A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product 6.5 Medium CVE-2025-39202 A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product 8.3 High
Track this CVE