Man-in-the-Middle Vulnerability in MicroSCADA X SYS600 by Hitachi Energy

CVE-2025-39205

What is CVE-2025-39205?

A vulnerability has been identified in the IEC 61850 implementation of Hitachi Energy's MicroSCADA X SYS600 product. The flaw lies in the TLS protocol's certificate validation process, which is not properly enforced, potentially allowing attackers to execute remote Man-in-the-Middle attacks. This oversight can result in unauthorized interception and manipulation of data being transmitted across the network, posing significant security risks to systems relying on the affected product.

References