CISA has republished a vendor advisory detailing multiple vulnerabilities in Hitachi Energy MicroSCADA X SYS600 product versions 10.7 and 10.8. The issues include a CSV injection flaw and an incorrect implementation of the authentication algorithm that could allow unauthorized access or privilege escalation. Researchers from Sandia National Laboratories reported the vulnerabilities to CISA. The advisory recommends updating to version 10.8 and following specific mitigation strategies outlined in the installation manual.
Read the full story at cisa.gov.
Photo: Tim Sullivan (CC0) via Openverse
