8.3
Élevée
CVE-2024-7940 The product exposes a service that is intended for local only to all network interfaces without any authentication
Description
The product exposes a service that is intended for local only to all network interfaces without any authentication.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MicroSCADA SYS600 10.2 | 10.2 → 10.5 | Pas de correctif indiqué |
| microscada_x_sys600 10.2 | 10.2 → 10.5 | Pas de correctif indiqué |
Autres CVE de MicroSCADA SYS600
Les 6 CVE de MicroSCADA SYS600 →
CVE-2026-9854
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their…
8.5
Élevée
CVE-2026-9853
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the…
8.5
Élevée
CVE-2026-9852
A CSV injection vulnerability exists in SYS600
4.6
Moyenne
CVE-2024-7941
An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified…
4.3
Moyenne