Hitachi Energy FACTS Control Platform (FCP)
CISA republished Hitachi Energy's advisory on five flaws, including two critical CVSS 9.9 issues, in the FACTS Control Platform GWS component for grid systems.
48
CVE-2024-7941
- CVSS 3.1
- 4.3 medium
- EPSS
- <1%p26
- Published
- ·
- Modified
Description · NVD
An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.
- Vendors
- hitachienergy
- Products
- microscada x sys600
- Weakness
- CWE-601
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N