8.2
Élevée
CVE-2024-3982 An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging…
Description
An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enabled and only users with administrator rights can enable it.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MicroSCADA SYS600 10.0 | 10.0 → 10.5 | Pas de correctif indiqué |
| microscada_x_sys600 10.0 | 10.0 → 10.5 | Pas de correctif indiqué |
Autres CVE de MicroSCADA SYS600
Les 6 CVE de MicroSCADA SYS600 →
CVE-2026-9854
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their…
8.5
Élevée
CVE-2026-9853
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the…
8.5
Élevée
CVE-2026-9852
A CSV injection vulnerability exists in SYS600
4.6
Moyenne
CVE-2024-7941
An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified…
4.3
Moyenne