The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesystem operations. If exploited the vulnerability allows the attacker to access or modify system files or other files that are critical to the application.
El producto permite que el usuario controle o influya en las rutas o nombres de archivos que se utilizan en las operaciones del sistema de archivos, lo que permite al atacante acceder o modificar archivos del sistema u otros archivos que son crÃticos para la aplicación.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-22
|
| [email protected] | Primary |
en
CWE-22
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| hitachienergy | microscada_pro_sys600 | 9.4 | <built-in method update of dict object at 0x7295eccd6bc0> | Application |
| hitachienergy | microscada_pro_sys600 | 9.4 | <built-in method update of dict object at 0x7295eccd4680> | Application |
| hitachienergy | microscada_pro_sys600 | 9.4 | <built-in method update of dict object at 0x7295a4894840> | Application |
| hitachienergy | microscada_pro_sys600 | 9.4 | <built-in method update of dict object at 0x7295a4894ec0> | Application |
| hitachienergy | microscada_pro_sys600 | 9.4 | <built-in method update of dict object at 0x7295eccd7640> | Application |
| hitachienergy | microscada_pro_sys600 | 9.4 | <built-in method update of dict object at 0x7295eccd5c40> | Application |
| hitachienergy | microscada_x_sys600 | * | <built-in method update of dict object at 0x7295eca70800> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:fixpack_1:*:*:*:*:*:* |
| Yes | cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:fixpack_2_hf1:*:*:*:*:*:* |
| Yes | cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:fixpack_2_hf2:*:*:*:*:*:* |
| Yes | cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:fixpack_2_hf3:*:*:*:*:*:* |
| Yes | cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:fixpack_2_hf4:*:*:*:*:*:* |
| Yes | cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:fixpack_2_hf5:*:*:*:*:*:* |
| Yes | cpe:2.3:a:hitachienergy:microscada_x_sys600:*:*:*:*:*:*:*:* |