Hitachi Energy MicroSCADA Pro/X SYS600 (Update A)
Hitachi Energy is aware of the multiple vulnerabilities that affect the MicroSCADA Pro/X SYS600 product versions listed in this document. An attacker successfully exploiting these vulnerabilities can cause confidentiality, integrity and availability impacts. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation.
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-7941US | medium4.3 | — | ||
An HTTP parameter may contain a URL value and could cause
the web application to redirect the request to the specified URL.
By modifying the URL value to a malicious site, an attac… | ||||
| CVE-2024-7940US | critical9.8OT erhöht | — | ||
The product exposes a service that is intended for local only to
all network interfaces without any authentication. | ||||
| CVE-2024-4872US | high8.8 | — | ||
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent dat… | ||||
| CVE-2024-3982US | high8.2OT erhöht | — | ||
An attacker with local access to machine where MicroSCADA X
SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of a… | ||||
| CVE-2024-3980US | high8.8 | — | ||
The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names
that are used in filesystem operations. If exploited the vulnerab… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cybersecurity Advisory - Multiple vulnerabilities in Hitachi Energy MicroSCADA Pro/X SYS600 productself
- ICS Advisory ICSA-24-331-04 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-331-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (10)
- MitigationMicroSCADA Pro/X SYS600
Follow the mitigation strategy as described in the Mitigation Factors/Workarounds section
- MitigationMicroSCADA Pro/X SYS600
Follow the mitigation strategy as described in the Mitigation Factors/Workarounds section
- MitigationMicroSCADA Pro/X SYS600
Follow the mitigation strategy as described in the Mitigation Factors/Workarounds section
- MitigationMicroSCADA Pro/X SYS600
Follow the mitigation strategy as described in the Mitigation Factors/Workarounds section
- MitigationMicroSCADA Pro/X SYS600
Follow the mitigation strategy as described in the Mitigation Factors/Workarounds section
- BehobenMicroSCADA Pro/X SYS600
Apply the patch 9.4 FP2 HF6 (Installation of previous FP2 hotfixes are required prior to the installation of HF6)
- BehobenMicroSCADA Pro/X SYS600
Apply the patch 9.4 FP2 HF6 (Installation of previous FP2 hotfixes are required prior to the installation of HF6)
- BehobenMicroSCADA Pro/X SYS600
Update to version 10.3 vulnerability patch 2025_01 or Update to version 10.6
- BehobenMicroSCADA Pro/X SYS600
Update to version 10.3 vulnerability patch 2025_01 or Update to version 10.6
- BehobenMicroSCADA Pro/X SYS600
Update to version 10.5 vulnerability patch 2025_01 or Update to version 10.6
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan