Back

HIGH

A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product

Published Aug 27, 2024

Description

A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to successfully exploit this vulnerability an attacker must have a valid credential.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

References (1)

Change history (189)
  1. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  2. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  3. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  4. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  5. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  6. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  7. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  8. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  9. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  10. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  11. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  12. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  13. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  14. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  15. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  16. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  17. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  18. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  19. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  20. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  21. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  22. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  23. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  24. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  25. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  26. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  27. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  28. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  29. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  30. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  31. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
    • CVSS severity changed from HIGH to CRITICAL
    • CVSS vector changed from CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 8.8 to 9.9
  32. MITRE
    • CVSS severity changed from CRITICAL to HIGH
    • CVSS vector changed from CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H to CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    • CVSS score changed from 9.9 to 8.8
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Hitachi Energy
Published Aug 27, 2024
Updated Aug 27, 2025
Reserved May 14, 2024
CISA Vulnrichment
Updated Aug 27, 2024
NVD
Status Analyzed
Modified Jun 17, 2026
Red Hat
Severity n/a
Public date n/a