Hitachi Energy MicroSCADA Pro/X SYS600 Products (Update A)
Successful exploitation of this vulnerability could allow an unauthorized user to execute administrator level scripts.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-3388US | high7.8 | — | ||
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA
Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-333-03 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-22-333-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationSYS600 10.x
Hitachi Energy released the following recommended immediate actions:
- MitigationSYS600 9.x
Hitachi Energy released the following recommended immediate actions:
- FixedSYS600 10.x
For SYS600 10.x: Update to at least SYS600 version 10.4.1 Or apply general mitigation factors from Hitachi Energy.
- FixedSYS600 9.x
For SYS600 9.x: Update to version SYS600 9.4 FP2 Hotfix 5 or up-grade to at least SYS600 version 10.4.1. A requirement to install SYS600 9.4 FP2 Hotfix 5 is to have at least the SYS600 9.4 FP2 Hotfix 4 installed.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan