Medium severity6.5NVD Advisory· Published Jun 24, 2025· Updated Jun 17, 2026

CVE-2025-39205

Description

A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product. The certificate validation of the TLS protocol allows remote Man-in-the-Middle attack due to missing proper validation.

Affected products

MicroSCADA/MicroSCADA X SYS600llm-create
Hitachienergy/MicroSCADA X SYS600llm-fuzzy
Hitachi/MicroSCADA X SYS600cpe-rescue
Range: 10.3

Patches

Vulnerability mechanics

References

publisher.hitachienergy.com/previewnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000