High severity8.8NVD Advisory· Published Nov 21, 2022· Updated Jun 17, 2026

CVE-2022-3388

Description

An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role.

Affected products

MicroSCADA/Monitor Prollm-create
Abb/MicroSCADA X SYS600llm-create
Abb/MicroSCADA Prollm-fuzzy
Hitachi/MicroSCADA X SYS600cpe-rescue2 versions
9.0+ 1 more
- (no CPE)range: 9.0
- (no CPE)range: 10.0

Patches

Vulnerability mechanics

References

search.abb.com/library/Download.aspxnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000