Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-3388

Input Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Hitachi Energy

Description

An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hitachi Energy MicroSCADA Pro SYS600

Default version status: unaffected

  • 9.0affected

Hitachi Energy MicroSCADA X SYS600

Default version status: unaffected

  • 10.0affected

References