7.5
High
CVE-2022-2277 Improper Input Validation vulnerability exists in the Hitachi Energy MicroSCADA X SYS600's ICCP stack during the ICCP…
Description
Improper Input Validation vulnerability exists in the Hitachi Energy MicroSCADA X SYS600's ICCP stack during the ICCP communication establishment causes a denial-of-service when ICCP of SYS600 is request to forward any data item updates with timestamps too distant in the future to any remote ICCP system. By default, ICCP is not configured and not enabled. This issue affects: Hitachi Energy MicroSCADA X SYS600 version 10.2 to version 10.3.1. cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:*
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MicroSCADA X SYS600 10.3 | 10.3 → 10.3.1 | No fix stated |
| MicroSCADA X SYS600 10.2 | 10.2 → 10.2.1 | No fix stated |
Other CVEs of MicroSCADA X SYS600
The 14 CVEs of MicroSCADA X SYS600 →
CVE-2025-39205
A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product
6.5
Medium
CVE-2025-39204
A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product
8.5
High
CVE-2025-39203
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product
6.5
Medium
CVE-2025-39202
A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product
8.3
High