CVE-2024-7940

High8.3Published on August 27, 2024

The product exposes a service that is intended for local only to all network interfaces without any authentication.

CVSS score8.3 / 10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness type (CWE)CWE-306, CWE-306

Vendorshitachienergy

Affected products

Vendors	Product	Versions
hitachienergy	microscada x sys600	< 10.6

Five Hitachi Energy FCP flaws, with CVSS 9.9, expose grid systems with GWS to data injection, file traversal, session hijack and phishing risks.

This product uses the NVD API but is not endorsed or certified by the NVD.