Approved changes feed: RSS · Atom

cpe:2.3:a:hitachi_energy:microscada_sys600:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHitachi Energy (57ae0a6c-1cbf-5100-9bbb-0f210f6013d6)
ProductMicroscada Sys600 (603d93ed-f97e-5a43-8170-8c168f2d0d88)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7941 vulnerable 2026-06-03 14:58:07.727753 Details available
MEDIUM (4.3)
An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials.
Published: 2024-08-27T12:57:55.044Z
Updated: 2024-08-27T13:12:59.267Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7940 vulnerable 2026-06-03 14:58:07.727334 Details available
HIGH (8.3)
The product exposes a service that is intended for local only to all network interfaces without any authentication.
Published: 2024-08-27T12:52:24.601Z
Updated: 2024-08-27T13:43:15.252Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3982 vulnerable 2026-06-03 14:56:32.597430 Details available
HIGH (8.2)
An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enabled and only users with administrator rights can enable it.
Published: 2024-08-27T12:47:21.577Z
Updated: 2024-08-27T17:52:18.269Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.