CVE-2024-7940 The product exposes a service that is intended for local only to all network interfaces without any authentication

Description

The product exposes a service that is intended for local only to all network interfaces without any authentication.

Affected products and versions

Product	Affected versions	Fixed in
MicroSCADA SYS600 10.2	10.2 → 10.5	No fix stated
microscada_x_sys600 10.2	10.2 → 10.5	No fix stated

Other CVEs of MicroSCADA SYS600

The 6 CVEs of MicroSCADA SYS600 →

CVE-2026-9854 A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their… 8.5 High CVE-2026-9853 A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the… 8.5 High CVE-2026-9852 A CSV injection vulnerability exists in SYS600 4.6 Medium CVE-2024-7941 An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified… 4.3 Medium