Critical severity9.9NVD Advisory· Published Aug 27, 2024· Updated Jun 17, 2026

CVE-2024-4872

Description

A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to successfully exploit this vulnerability an attacker must have a valid credential.

Affected products

Hitachienergy/MicroSCADA X SYS600llm-fuzzy
Hitachi/MicroSCADA X SYS600cpe-rescue2 versions
9.4 FP2 HF1+ 1 more
- (no CPE)range: 9.4 FP2 HF1
- (no CPE)range: 10.0

Patches

Vulnerability mechanics

References

publisher.hitachienergy.com/previewnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.643
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000