Hitachi Energy MicroSCADA X SYS600: CSV injection and authentication flaws disclosed
CISA published an advisory on vulnerabilities in Hitachi Energy MicroSCADA X SYS600 versions up to 10.7 and 10.8, including CSV formula injection and a flawed authentication algorithm. The vendor CVSS v3 score is 7.8.