4.3
Moyenne
CVE-2024-7941 An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified…
Description
An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| MicroSCADA SYS600 10.0 | 10.0 → 10.5 | Pas de correctif indiqué |
Autres CVE de MicroSCADA SYS600
Les 6 CVE de MicroSCADA SYS600 →
CVE-2026-9854
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their…
8.5
Élevée
CVE-2026-9853
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the…
8.5
Élevée
CVE-2026-9852
A CSV injection vulnerability exists in SYS600
4.6
Moyenne
CVE-2024-7940
The product exposes a service that is intended for local only to
all network interfaces without any authentication
8.3
Élevée