CVE-2025-39201: Hitachienergy Microscada X SYS600

Medium severity, CVSS 6.1. EPSS: 0.1% chance of exploitation in the next 30 days.

A vulnerability exists in MicroSCADA X SYS600 product. If exploited this could allow a local unauthenticated attacker to tamper a system file, making denial of Notify service.

Affected products

• Hitachienergy Microscada X SYS600: from 10.0, before 10.7 (fixed in 10.7)

Published 2025-06-24. Last modified 2026-06-17.