Description
An HTTP parameter may contain a URL value and could cause
the web application to redirect the request to the specified URL.
By modifying the URL value to a malicious site, an attacker may
successfully launch a phishing scam and steal user credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hitachi Energy | MicroSCADA SYS600 | 10.0 – ≤ 10.5 | — |
Advisories 2
- ICSA-26-260-03 Hitachi Energy FACTS Control Platform (FCP) CISA ICS & IT advisories · Sep 17, 2026
- ICSA-24-331-04 Hitachi Energy MicroSCADA Pro/X SYS600 (Update A) CISA ICS & IT advisories · Mar 25, 2025