Skip to content
OpenAdvisories
High ICSA-22-333-03 1 CVE

Hitachi Energy MicroSCADA Pro/X SYS600 Products (Update A)

Published Nov 29, 2022 · Updated Nov 9, 2023 · Revision 2

Vendor: Hitachi Energy Product: SYS600 10.x Product: SYS600 9.x

Summary

Successful exploitation of this vulnerability could allow an unauthorized user to execute administrator level scripts.

Vulnerabilities 1

  • High 8.8
    CVE-2022-3388

    Input Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products

    An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role.

    Hitachi Energy MicroSCADA X SYS600 MicroSCADA Pro SYS600 ICS / OT

Revision history

  1. #2

    Update A - Update to Affected Product Versions, CWE, & Recommended Immediate Actions

  2. #1

    Initial Publication

References