TI-2026-08621 Aliases CVE-2026-9852 GHSA-5ph9-h7vg-rh4m

CSV injection in Hitachi Energy MicroSCADA SYS600

LOW 21CWE-1236Published 2026-09-03 · Updated 2026-09-03

Key facts

Attack vector: Local
Privileges required: None
User interaction: Active
Attack complexity: Low
Attack requirements: None
Impact type: —
Confidentiality · integrity · availability: Low · Low · None
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured, execute malicious code on the user’s machine. To exploit this issue attackers would need a way to create arbitrary log messages. This could be achieved through normal functionality via SCIL scripts, a log injection vulnerability, or via the SYS600 broker. This vulnerability affects all Windows users regardless of their privilege level who can run the Notify service and export the log.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00209 11th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Hitachi Energy	MicroSCADA SYS600	10.0 – 10.7	—	No fix listed	CNA

MicroSCADA SYS600 VendorHitachi Energy Affected 10.0 – 10.7 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:hitachienergy:microscada_x_sys600::::::::	10.0 – 10.7	Vulnerable	Hitachi Energy

cpe:2.3:a:hitachienergy:microscada_x_sys600:*:*:*:*:*:*:*:* Versions 10.0 – 10.7 Vulnerable ·Hitachi Energy

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2026-9852
2026-10-03 Alias added: GHSA-5ph9-h7vg-rh4m

References

Advisory 1

https://publisher.hitachienergy.com/preview?DocumentID=8DBD000249&LanguageCode=en&DocumentPartId=&Action=Launch

TI-2024-07362 The product exposes a service that is intended for local only to all network interfaces without any authentication. CVSS 3.1CRITICAL 9.8
TI-2024-03713 Path traversal in Hitachi Energy MicroSCADA X SYS600 CVSS 3.1CRITICAL 9.9
TI-2024-04530 A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. CVSS 3.1CRITICAL 9.9
TI-2022-12271 Improper input validation in Hitachi Energy MicroSCADA X SYS600 CVSS 3.1HIGH 7.5
TI-2022-11954 Improper input validation in Hitachi Energy MicroSCADA X SYS600 CVSS 3.1HIGH 7.5
TI-2022-02102 A vulnerability exists in the ICCP stack of the affected SYS600 versions due to… CVSS 3.1HIGH 7.5

See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences