8.5
High
CVE-2025-39204 A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product
Description
A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering query in the Web interface can be malformed, so returning data can leak unauthorized information to the user.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MicroSCADA X SYS600 10.0 | 10.0 → 10.6 | No fix stated |
Other CVEs of MicroSCADA X SYS600
The 14 CVEs of MicroSCADA X SYS600 →
CVE-2025-39205
A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product
6.5
Medium
CVE-2025-39203
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product
6.5
Medium
CVE-2025-39202
A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product
8.3
High
CVE-2025-39201
A vulnerability exists in MicroSCADA X SYS600 product
6.1
Medium