60
CVE-2024-4872
- CVSS 3.1
- 8.8 high
- EPSS
- <1%p41
- Published
- ·
- Modified
Description · NVD
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to successfully exploit this vulnerability an attacker must have a valid credential.
- Vendors
- hitachienergy
- Products
- microscada pro sys600, microscada x sys600
- Weakness
- CWE-943
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news
3 storiesCyble Urges Critical Vulnerability Fixes Affecting Industrial Systems
60
Hitachi Energy FACTS Control Platform (FCP)
CISA republished Hitachi Energy's advisory on five flaws, including two critical CVSS 9.9 issues, in the FACTS Control Platform GWS component for grid systems.
48