Hitachienergy Microscada Pro SYS600 vulnerabilities

4 CVEs affecting Hitachienergy Microscada Pro SYS600, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-4872, published 2024-08-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-5620, published 2020-04-29. Critical severity, CVSS 9.8. EPSS: 70.9% chance of exploitation in the next 30 days. ABB MicroSCADA Pro SYS600 version 9.3 suffers from an instance of CWE-306: Missing Authentication for Critical Function.
CVE-2024-3980, published 2024-08-27. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesystem operations. If exploited the vulnerability allows the…
CVE-2024-4872, published 2024-08-27. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to…
CVE-2022-3388, published 2022-11-21. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution…