Description
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA
Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi Energy | MicroSCADA Pro SYS600 | 9.0 | — |
| Hitachi Energy | MicroSCADA X SYS600 | 10.0 | — |
Advisories 1
- ICSA-22-333-03 Hitachi Energy MicroSCADA Pro/X SYS600 Products (Update A) CISA ICS & IT advisories · Nov 9, 2023