CVE-2024-7941

Medium4.3Published on August 27, 2024

An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.

CVSS score4.3 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness type (CWE)CWE-601, CWE-601

Vendorshitachienergy

Affected products

Vendors	Product	Versions
hitachienergy	microscada x sys600	10.5

Vulnerabilities

Five Hitachi Energy FCP Flaws Expose Grid-Control Systems to Data, File and Session Attacks

Five Hitachi Energy FCP flaws, with CVSS 9.9, expose grid systems with GWS to data injection, file traversal, session hijack and phishing risks.

Sep 18, 202601:365 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

Five Hitachi Energy FCP Flaws Expose Grid-Control Systems to Data, File and Session Attacks