CVE-2022-3388: Hitachienergy Microscada Pro SYS600

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role.

Affected products

• Hitachienergy Microscada Pro SYS600: version 9.0 only; version 9.1 only; version 9.2 only; version 9.3 only; version 9.4 only
• Hitachienergy Microscada X SYS600: version 10 only; version 10.1 only; version 10.1.1 only; version 10.2 only; version 10.2.1 only; version 10.3 only; …

Published 2022-11-21. Last modified 2026-06-17.