9.9
Critical
CVE-2024-4872 A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product
Description
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to successfully exploit this vulnerability an attacker must have a valid credential.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| microscada_sys600 10.0 | 10.0 → 10.5 | No fix stated |
| MicroSCADA X SYS600 10.0 | 10.0 → 10.5 | No fix stated |
| MicroSCADA Pro SYS600 | Versions not published |