CVE-2025-39203 Denial of service in MicroSCADA X SYS600
Crafted IEC 61850 messages can cause a denial of service in Hitachi Energy MicroSCADA X SYS600, disrupting operations.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-39203?
CVE-2025-39203 is a high-severity denial of service vulnerability in Hitachi Energy MicroSCADA X SYS600, published on 24 Jun 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product. An IEC 61850-8 crafted message content from IED or remote system can cause a denial of service resulting in disconnection loop.
Weakness: CWE-354
Which versions are affected by CVE-2025-39203?
It affects 1 product.
Products include Hitachienergy Microscada X Sys600.
How do I fix CVE-2025-39203?
No fix has been published for CVE-2025-39203 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2025-39203 being exploited?
There is no known exploitation of CVE-2025-39203 in the wild and no public exploit code.
Other vulnerabilities in Hitachi Energy MicroSCADA X SYS600
Sources
Also known as GHSA-8jwm-q5xv-g48g.