01 Record

CVE-2022-3388

Input Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products

HighPUBLISHEDCNA: Hitachi Energy

CNA base score8.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

View raw JSON

02 Description

Input Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.29% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 21.0% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2022-11-21 00:00Z3 YR AGO

Last updated

2025-07-23 20:45Z1 YR AGO

Reserved

2022-09-30

Assigning CNA

Hitachi Energy

Record state

PUBLISHED

Severity

High (CVSS 8.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-20Improper Input ValidationClass

Data version

5.1

Document digest

16d4987aa484deb6b7b581c66e7f8612c4da3009cfc2f67393518c8dfc7bb4fa

05 Affected products

VendorProductVersionsPlatforms

Hitachi EnergyMicroSCADA Pro SYS6009.0—

Hitachi EnergyMicroSCADA X SYS60010.0—

06 References

search.abb.comhttps://search.abb.com/library/Download.aspx?DocumentID=8DBD000123&LanguageCode=en&DocumentPartId=&Action=Launch&elqaid=4293&elqat=1

07 Remediation

For SYS600 9.x: update to at SYS600 version SYS600 9.4 FP2 Hotfix 5 when it is released or upgrade to at least SYS600 version 10.4.1. A requirement to install SYS600 9.4 FP2 Hotfix 5 is to have at least the SYS600 9.4 FP2 Hotfix 4 installed. CPE: cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.0:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.2:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.3:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:*:*:*:*:*:*:*

For SYS600 10.x update to at least SYS600 version 10.4.1 Or apply general mitigation factors. CPE: cpe:2.3:a:hitachienergy:microscada_x_sys600:10:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.4:*:*:*:*:*:*:*

01 Record index

CVE-2022-3388

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

07 Remediation

02 Records

CVE-2022-3388

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

07 Remediation