medium6.5
CVE-2025-39204
A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product.
Impact
A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering query in the Web interface can be malformed, so returning data can leak unauthorized information to the user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hitachienergy | Microscada X Sys600 | from 10.0 before 10.7 |