4.3
Medium
CVE-2024-7941 An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified…
Description
An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MicroSCADA SYS600 10.0 | 10.0 → 10.5 | No fix stated |
Other CVEs of MicroSCADA SYS600
The 6 CVEs of MicroSCADA SYS600 →
CVE-2026-9854
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their…
8.5
High
CVE-2026-9853
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the…
8.5
High
CVE-2026-9852
A CSV injection vulnerability exists in SYS600
4.6
Medium
CVE-2024-7940
The product exposes a service that is intended for local only to
all network interfaces without any authentication
8.3
High