6.5
Medium
CVE-2025-39205 A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product
Description
A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-the-Middle attack due to missing proper validation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MicroSCADA X SYS600 10.3 | 10.3 → 10.6 | No fix stated |
Other CVEs of MicroSCADA X SYS600
The 14 CVEs of MicroSCADA X SYS600 →
CVE-2025-39204
A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product
8.5
High
CVE-2025-39203
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product
6.5
Medium
CVE-2025-39202
A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product
8.3
High
CVE-2025-39201
A vulnerability exists in MicroSCADA X SYS600 product
6.1
Medium