high8.8
CVE-2022-3388
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600.
Impact
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hitachienergy | Microscada Pro Sys600 | Versions 9.0, 9.1, 9.2, 9.3, 9.4 |
| Hitachienergy | Microscada X Sys600 | Versions 10, 10.1, 10.1.1, 10.2, 10.2.1, 10.3 |