CVE-2024-4872 | BDVDB-2026-246813 Detail
Hitachi EnergyMicroSCADA X SYS600
Description#
A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to successfully exploit this vulnerability an attacker must have a valid credential.
Impact#
CAPEC-248 Command Injection
Weaknesses#
- CWE-943 Improper Neutralization of Special Elements in Data Query Logic
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.