CVE-2026-9853: CWE-303 Incorrect implementation of authentication algorithm in Hitachi Energy MicroSCADA SYS600
Description
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without being authenticated to the SYS600 system itself. Only the SYS600 system users should be permitted to view and modify application objects.
CVSS v4.0
Score 8.5high
Affected software
Hitachi Energy
MicroSCADA SYS600
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-303) in MicroSCADA SYS600 version 10.0 involves an incorrect implementation of the authentication algorithm. Specifically, users with operating system-level authentication on the server hosting SYS600 can bypass SYS600's own authentication controls and access or modify application objects. The flaw undermines SYS600's access restrictions, potentially exposing sensitive control data or configurations to unauthorized users who have OS-level access.
Potential Impact
The impact is that any user with operating system authentication on the server can access and modify SYS600 application objects without SYS600 authentication. This could lead to unauthorized changes in the SCADA system's configuration or data, potentially affecting operational integrity. However, exploitation requires OS-level access, which limits the attack surface to users who already have some level of system access.
Mitigation Recommendations
No official patch or remediation is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is provided, restrict and monitor operating system access to the server hosting SYS600 to prevent unauthorized users from gaining OS-level authentication.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Hitachi Energy
- Date Reserved
- 2026-05-28T15:04:56.583Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a992adaacd9273b49a53d8a
Added to database: 09/03/2026, 08:07:54 UTC
Last enriched: 09/07/2026, 13:16:13 UTC
Last updated: 10/18/2026, 18:48:26 UTC
Views: 88
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.