by Kastro
Paper/Archive/CVE-2024-3980

CVE-2024-3980

Hitachi Energy MicroSCADA X SYS600 — The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in files…

EPSS 0.6%CVSS 9.9
critical.is priorityof 100
40
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 49.3.493 × 209.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesystem operations. If exploited the vulnerability allows the attacker to access or modify system files or other files that are critical to the application.

Affected

ProductAffectedFixed inSource
MicroSCADA X SYS60010.0 – 10.5–CNA
MicroSCADA Pro SYS6009.4 FP2 HF1 – 9.4 FP2 HF5–CNA
MicroSCADA Pro SYS6009.4 FP1–CNA
microscada_sys60010.0 – 10.5–CISA-ADP

Scores by source

Hitachi Energy (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refpublisher.hitachienergy.com/preview?DocumentID=8DBD000160&LanguageCode=en&DocumentPartId=&Action=Launch