MicroSCADA Pro SYS600 vulnerabilities
5 known vulnerabilities in MicroSCADA Pro SYS600 from Hitachi Energy. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
MicroSCADA X SYS600: Improper Neutralization of Special Elements in Data Query Logic
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to successfully exploit this vulnerability an attacker must have a
- 8.8 High severity
MicroSCADA X SYS600: Improper Limitation of a Pathname to a Restricted Directory
The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesystem operations. If exploited the vulnerability allows the attacker to access or modify system files or other files that a
- 7.8 High severity
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and…
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role.
- 7.5 High severity
Improper Input Validation vulnerability in the handling of a specially crafted IEC 61850…
Improper Input Validation vulnerability in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server in the Hitachi Energy MicroSCADA X SYS600, MicroSCADA Pro SYS600. The vulnerability
- 7.5 High severity
Improper Input Validation vulnerability in the handling of a malformed IEC 104 TCP packet in…
Improper Input Validation vulnerability in the handling of a malformed IEC 104 TCP packet in the Hitachi Energy MicroSCADA X SYS600, MicroSCADA Pro SYS600. Upon receiving a malformed IEC 104 TCP packet, the malformed packet is dropped, however the TCP connecti