← Database

CVE-2025-39204

MEDIUM CVSS: 6.5 Published: 2025-06-24 Modified: 2026-06-17

Description

A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product. The filtering query in the Web interface can be malformed, so returning data can leak unauthorized information to the user.

Affected Platforms

Hitachienergy Microscada X Sys600

Weakness Type

CWE-200, NVD-CWE-noinfo

References