critical9.9
CVE-2024-4872
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product.
Impact
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to successfully exploit this vulnerability an attacker must have a valid credential.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hitachienergy | Microscada Pro Sys600 | Version 9.4 |
| Hitachienergy | Microscada X Sys600 | from 10.0 before 10.6 |