CVE-2024-4872

Critical9.9Published on August 27, 2024

A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to successfully exploit this vulnerability an attacker must have a valid credential.

CVSS score9.9 / 10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness type (CWE)CWE-943

Vendorshitachienergy

Affected products

Vendors	Product	Versions
hitachienergy	microscada pro sys600	9.4
hitachienergy	microscada x sys600	< 10.6

Vulnerabilities

Five Hitachi Energy FCP Flaws Expose Grid-Control Systems to Data, File and Session Attacks

Five Hitachi Energy FCP flaws, with CVSS 9.9, expose grid systems with GWS to data injection, file traversal, session hijack and phishing risks.

Sep 18, 202601:365 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

Five Hitachi Energy FCP Flaws Expose Grid-Control Systems to Data, File and Session Attacks