CVE-2024-4872

🗓️ 27 Aug 2024 12:37:28Reported by Hitachi EnergyType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 86 Views

The product is vulnerable to injection attacks due to lack of query validation

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	Hitachi Energy MicroSCADA X SYS600 Code Execution	28 Apr 202500:00	–	bdu_fstec
Circl	CVE-2024-4872	27 Aug 202415:43	–	circl
CNNVD	Hitachi Energy MicroSCADA X SYS600 SQL注入漏洞	27 Aug 202400:00	–	cnnvd
Cvelist	CVE-2024-4872	27 Aug 202412:37	–	cvelist
EUVD	EUVD-2024-44446	3 Oct 202520:07	–	euvd
NVD	CVE-2024-4872	27 Aug 202413:15	–	nvd
osv_cve	CVE-2024-4872	27 Aug 202413:15	–	osv_cve
Positive Technologies	PT-2024-33191 · Unknown · Microscada Pro/X Sys600	27 Aug 202400:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2024-4872: Improper Neutralization of Special Elements in Data Query Logic	27 Aug 202400:00	–	rapid7
RedhatCVE	CVE-2024-4872	5 Feb 202500:14	–	redhatcve

NVD

Node

hitachienergy microscada_pro_sys600Match9.4fixpack_2_hf1

hitachienergy microscada_pro_sys600Match9.4fixpack_2_hf2

hitachienergy microscada_pro_sys600Match9.4fixpack_2_hf3

hitachienergy microscada_pro_sys600Match9.4fixpack_2_hf4

hitachienergy microscada_pro_sys600Match9.4fixpack_2_hf5

hitachienergy microscada_x_sys600Range10.0–10.6

[
  {
    "defaultStatus": "unaffected",
    "product": "MicroSCADA X SYS600",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "lessThanOrEqual": "10.5",
        "status": "affected",
        "version": "10.0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "10.3 vulnerability patch 2025_01",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "10.4 vulnerability patch 2025_01",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "10.5 vulnerability patch 2025_01",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "MicroSCADA Pro SYS600",
    "vendor": "Hitachi Energy",
    "versions": [
      {
        "lessThanOrEqual": "9.4 FP2 HF5",
        "status": "affected",
        "version": "9.4 FP2 HF1",
        "versionType": "custom"
      }
    ]
  }
]