Hitachi Energy MicroSCADA Pro/X SYS600 Products (Update A)
Successful exploitation of this vulnerability could allow an unauthorized user to execute administrator level scripts.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-3388US | high7.8 | — | ||
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA
Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-22-333-03 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-22-333-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (4)
- MitigationSYS600 10.x
Hitachi Energy released the following recommended immediate actions:
- MitigationSYS600 9.x
Hitachi Energy released the following recommended immediate actions:
- BehobenSYS600 10.x
For SYS600 10.x: Update to at least SYS600 version 10.4.1 Or apply general mitigation factors from Hitachi Energy.
- BehobenSYS600 9.x
For SYS600 9.x: Update to version SYS600 9.4 FP2 Hotfix 5 or up-grade to at least SYS600 version 10.4.1. A requirement to install SYS600 9.4 FP2 Hotfix 5 is to have at least the SYS600 9.4 FP2 Hotfix 4 installed.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan