Paper/Archive/CVE-2024-4872

CVE-2024-4872

Hitachi Energy MicroSCADA X SYS600 — A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product.

EPSS 0.5%CVSS 9.9

critical.is priorityof 100

CVSS 9.9 (CNA)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 42.6.426 × 208.5 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to successfully exploit this vulnerability an attacker must have a valid credential.

Affected

ProductAffectedFixed inSource

MicroSCADA X SYS60010.0 – 10.510.3 vulnerability patch 2025_01CNA

MicroSCADA Pro SYS6009.4 FP2 HF1 – 9.4 FP2 HF5–CNA

microscada_sys60010.0 – 10.5–CISA-ADP

Scores by source

Hitachi Energy (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorypublisher.hitachienergy.com/preview?DocumentID=8DBD000160&LanguageCode=en&DocumentPartId=&Action=Launch