Hitachi Energy MicroSCADA Pro SYS600

• CVE-2024-3980 Critical 9.9 The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesystem operations. If exploited the vulnerability allows the att 0.6%
• CVE-2024-4872 Critical 9.9 A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to succ 0.5%
• CVE-2022-3388 High 8.8 Input Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products 0.3%
• CVE-2022-29492 Medium 5.3 A vulnerability exists in the handling of a malformed IEC 104 TCP packet. Upon receiving a malformed IEC 104 TCP packet, the malformed packet is dropped, however the TCP connection is left open. This may cause a denial-of-service if the affected conne ... 0.7%
• CVE-2022-29922 High 7.5 A vulnerability exists in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server. The vulnerability may cause a denial-of-service on the IEC 61850 OPC Server part of the SYS ... 0.8%