CISA 2026-10-20

Hitachi Energy MicroSCADA X SYS600 Product

Machine-generated analysis · WAYSCloud LLM

CSV injection in MicroSCADA X SYS600 can allow malicious formulas in exported logs; Hitachi Energy recommends updating to version 10.8.

Context

The advisory concerns Hitachi Energy’s MicroSCADA X SYS600 product, versions 10.7 and earlier (and 10.8 listed). It reports a CSV injection vulnerability (CVE-2026-9852) that can modify spreadsheet data, insert links, exfiltrate data, and potentially execute code on Windows machines via the Notify service log export. The vendor provides a fix by releasing version 10.8. The vulnerability is rated CVSS 7.8.

Operator considerations

Check: Verify the installed MicroSCADA X SYS600 version is not earlier than 10.8.
Patch: Apply the vendor update to version 10.8.
Log: Monitor for unexpected CSV log export activity or anomalous log creation events.

From Cybersecurity and Infrastructure Security Agency ↗

Hitachi Energy is aware of multiple vulnerabilities that affect MicroSCADA X SYS600 product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.

The following versions of Hitachi Energy MicroSCADA X SYS600 Product are affected:

MicroSCADA X SYS600 vers:MicroSCADA_X_SYS600/

Read the full advisory on CISA →