8.2
High
CVE-2024-3982 An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging…
Description
An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enabled and only users with administrator rights can enable it.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MicroSCADA SYS600 10.0 | 10.0 → 10.5 | No fix stated |
| microscada_x_sys600 10.0 | 10.0 → 10.5 | No fix stated |
Other CVEs of MicroSCADA SYS600
The 6 CVEs of MicroSCADA SYS600 →
CVE-2026-9854
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their…
8.5
High
CVE-2026-9853
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the…
8.5
High
CVE-2026-9852
A CSV injection vulnerability exists in SYS600
4.6
Medium
CVE-2024-7941
An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified…
4.3
Medium