A critical privilege escalation flaw in Hitachi Energy MicroSCADA SYS600 allows authenticated users to obtain full administrative control over the host operating system.

This vulnerability involves an incorrect implementation of the authentication algorithm within the RBAC mechanism, which can be triggered by a low-privileged user with access to engineering tools to escalate privileges to the administrator level.

The ability for a low-privileged user to achieve full administrative control over the host machine presents a severe threat to operational integrity. Given the 8.5 CVSS score, this high-severity flaw could lead to total system compromise, unauthorized data modification, or the disruption of industrial control processes, resulting in significant operational downtime and safety risks.

Immediate Action: Review the official Hitachi Energy security advisory and apply the recommended firmware or software updates as soon as they become available.

Proactive Monitoring: Audit access logs for the engineering tools and monitor for any suspicious administrative activity or unauthorized privilege escalation events on the host Windows server.

Compensating Controls: Restrict access to the engineering tools to only essential personnel and implement strict host-based access controls to limit the potential impact of a compromised low-privileged account.

Public Exploit Available: Unknown

This vulnerability represents a significant security risk for organizations utilizing MicroSCADA SYS600, as it facilitates full host takeover. Administrators must prioritize the identification of affected systems and prepare for an immediate update once the vendor provides a patch. Until the update is applied, organizations should enforce the principle of least privilege to minimize the number of users with access to the vulnerable engineering tools.