Hitachi Energy FACTS Control Platform (FCP)
CISA republished Hitachi Energy's advisory on five flaws, including two critical CVSS 9.9 issues, in the FACTS Control Platform GWS component for grid systems.
48
CVE-2024-3982
- CVSS 3.1
- 8.2 high
- EPSS
- <1%p12
- Published
- ·
- Modified
Description · NVD
An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enabled and only users with administrator rights can enable it.
- Vendors
- hitachienergy
- Products
- microscada x sys600
- Weakness
- CWE-294
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H