CVE-2024-4872

🗓️ 27 Aug 2024 12:37:28Reported by Hitachi EnergyType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 50 Views

The product is vulnerable to injection attacks due to lack of query validation

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-4872	27 Aug 202415:43	–	circl
CNNVD	Hitachi Energy MicroSCADA X SYS600 SQL注入漏洞	27 Aug 202400:00	–	cnnvd
Cvelist	CVE-2024-4872	27 Aug 202412:37	–	cvelist
EUVD	EUVD-2024-44446	3 Oct 202520:07	–	euvd
NVD	CVE-2024-4872	27 Aug 202413:15	–	nvd
OSV	CVE-2024-4872	27 Aug 202413:15	–	osv
Positive Technologies	PT-2024-33191 · Unknown · Microscada Pro/X Sys600	27 Aug 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-4872	5 Feb 202500:14	–	redhatcve
The Hacker News	⚡ Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and More	14 Apr 202511:19	–	thn
Vulnrichment	CVE-2024-4872	27 Aug 202412:37	–	vulnrichment

NVD

Node

hitachienergy microscada_pro_sys600Match9.4fixpack_2_hf1

hitachienergy microscada_pro_sys600Match9.4fixpack_2_hf2

hitachienergy microscada_pro_sys600Match9.4fixpack_2_hf3

hitachienergy microscada_pro_sys600Match9.4fixpack_2_hf4

hitachienergy microscada_pro_sys600Match9.4fixpack_2_hf5

hitachienergy microscada_x_sys600Range10.0–10.6

[
  {
    "defaultStatus": "unaffected",
    "product": "MicroSCADA X SYS600",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "lessThanOrEqual": "10.5",
        "status": "affected",
        "version": "10.0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "10.3 vulnerability patch 2025_01",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "10.4 vulnerability patch 2025_01",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "10.5 vulnerability patch 2025_01",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MicroSCADA Pro SYS600",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "lessThanOrEqual": "9.4 FP2 HF5",
        "status": "affected",
        "version": "9.4 FP2 HF1",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
publisher	www.publisher.hitachienergy.com/preview

11 Apr 2025 14:01Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.8 - 9.9

EPSS0.005

SSVC

CWE-943

product vulnerability injection_attack query_validation risk_non_validation