microscada_sys600 vulnerabilities

2 known vulnerabilities in microscada_sys600 from Hitachienergy. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  MicroSCADA X SYS600: Improper Neutralization of Special Elements in Data Query Logic

  CVE-2024-4872Aug 27, 2024Hitachi Energy

  A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to successfully exploit this vulnerability an attacker must have a

• 8.8 High severity

  MicroSCADA X SYS600: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-3980Aug 27, 2024Hitachi Energy

  The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesystem operations. If exploited the vulnerability allows the attacker to access or modify system files or other files that a