Data Leakage Vulnerability in MicroSCADA X SYS600 by Hitachi Energy

CVE-2025-39204

What is CVE-2025-39204?

A vulnerability has been identified in the web interface of the MicroSCADA X SYS600 product from Hitachi Energy. This vulnerability allows for the manipulation of filtering queries, which can result in the unintended disclosure of sensitive information to unauthorized users. Proper filtering and validation are essential to prevent such data leakage incidents, ensuring the integrity and confidentiality of user data.

References