9.9
Critical
CVE-2024-3980 The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names…
Description
The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesystem operations. If exploited the vulnerability allows the attacker to access or modify system files or other files that are critical to the application.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MicroSCADA X SYS600 10.0 | 10.0 → 10.5 | No fix stated |
| MicroSCADA Pro SYS600 | Versions not published | |
| microscada_sys600 10.0 | 10.0 → 10.5 | No fix stated |
Other CVEs of MicroSCADA X SYS600
The 14 CVEs of MicroSCADA X SYS600 →
CVE-2025-39205
A vulnerability exists in the IEC 61850 in MicroSCADA X SYS600 product
6.5
Medium
CVE-2025-39204
A vulnerability exists in the Web interface of the MicroSCADA X SYS600 product
8.5
High
CVE-2025-39203
A vulnerability exists in the IEC 61850 of the MicroSCADA X SYS600 product
6.5
Medium
CVE-2025-39202
A vulnerability exists in in the Monitor Pro interface of the MicroSCADA X SYS600 product
8.3
High