MicroSCADA SYS600 vulnerabilities
4 known vulnerabilities in MicroSCADA SYS600 from Hitachi Energy. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
MicroSCADA SYS600: Incorrect Implementation of Authentication Algorithm
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows host, granting themselves full control over the host machine.
- 7.8 High severity
MicroSCADA SYS600: Incorrect Implementation of Authentication Algorithm
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read and modify application objects without being authenticated to the SYS600 system itself. Only the SYS600 system users shou
- 7.8 High severity
MicroSCADA SYS600: Improper Neutralization of Formula Elements in a CSV File
A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured, execute malicious code on the u
- 8.2 High severity
MicroSCADA SYS600: Authentication Bypass by Capture-replay
An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enab