EUVD-2024-44446

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Vulnerability in MicroSCADA Pro/X SYS600 allows authenticated code injection into persistent data

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the software for the Hitachi Energy MicroSCADA X SYS600 and Pro SYS600 systems lies in the improper neutralization of certain components, allowing a intruder to execute arbitrary code.	28 Apr 202500:00	–	bdu_fstec
Circl	CVE-2024-4872	27 Aug 202415:43	–	circl
CNNVD	Hitachi Energy MicroSCADA X SYS600 SQL注入漏洞	27 Aug 202400:00	–	cnnvd
CVE	CVE-2024-4872	27 Aug 202412:37	–	cve
Cvelist	CVE-2024-4872	27 Aug 202412:37	–	cvelist
NVD	CVE-2024-4872	27 Aug 202413:15	–	nvd
OSV	CVE-2024-4872	27 Aug 202413:15	–	osv
Positive Technologies	PT-2024-33191 · Unknown · Microscada Pro/X Sys600	27 Aug 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-4872	5 Feb 202500:14	–	redhatcve
The Hacker News	⚡ Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and More	14 Apr 202511:19	–	thn

[
  {
    "enisaIdVendor": [
      {
        "id": "ca81c507-4496-3430-8c8b-822a00e65826",
        "vendor": {
          "name": "Hitachi Energy"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "7f125a36-91cd-338e-be39-eb1308a5ebd0",
        "product": {
          "name": "MicroSCADA X SYS600"
        },
        "product_version": ""
      },
      {
        "id": "e934fe8c-cf4f-372e-88dc-3a357c824008",
        "product": {
          "name": "MicroSCADA X SYS600"
        },
        "product_version": "10.0 ≤10.5"
      },
      {
        "id": "f5297619-4ee1-330d-9175-edc3b355b774",
        "product": {
          "name": "MicroSCADA Pro SYS600"
        },
        "product_version": "9.4 FP2 HF1 ≤9.4 FP2 HF5"
      }
    ]
  }
]

Source	Link
publisher	www.publisher.hitachienergy.com/preview

03 Oct 2025 20:07Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.8 - 9.9

EPSS0.005

SSVC