Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2024-4872

A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent dat

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Hitachi Energy

Description

A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to successfully exploit this vulnerability an attacker must have a valid credential.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hitachi Energy MicroSCADA X SYS600

Default version status: unaffected

  • 10.0 to ≤ 10.5affected
  • 10.3 vulnerability patch 2025_01unaffected
  • 10.4 vulnerability patch 2025_01unaffected
  • 10.5 vulnerability patch 2025_01unaffected

Hitachi Energy MicroSCADA Pro SYS600

Default version status: unaffected

  • 9.4 FP2 HF1 to ≤ 9.4 FP2 HF5affected

References