8.8
High
CVE-2022-3388 An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600
Description
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MicroSCADA Pro SYS600 | 9.0 | No fix stated |
| MicroSCADA X SYS600 | 10.0 | No fix stated |
Other CVEs of MicroSCADA Pro SYS600
The 5 CVEs of MicroSCADA Pro SYS600 →
CVE-2024-3980
The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names…
9.9
Critical
CVE-2024-4872
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product
9.9
Critical
CVE-2022-29492
Improper Input Validation vulnerability in the handling of a malformed IEC 104 TCP packet in the Hitachi Energy…
5.3
Medium
CVE-2022-29922
Improper Input Validation vulnerability in the handling of a specially crafted IEC 61850 packet with a valid data item…
7.5
High