Input validation

2022-11-2119:15:00

PRIOn knowledge base

www.prio-n.com

input validation

monitor pro

microscada pro

microscada x sys600

remote code execution

authenticated user

0.001 Low

EPSS

Percentile

32.6%

JSON

An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA
Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user’s role.

CPENameOperatorVersion
microscada_pro_sys600eq9.1
microscada_pro_sys600eq9.2
microscada_pro_sys600eq9.3
microscada_pro_sys600eq9.4
microscada_pro_sys600eq9.0
microscada_x_sys600eq10.1
microscada_x_sys600eq10.1.1
microscada_x_sys600eq10.2
microscada_x_sys600eq10.2.1
microscada_x_sys600eq10.3

Name	Operator	Version
microscada_pro_sys600	eq	9.1
microscada_pro_sys600	eq	9.2
microscada_pro_sys600	eq	9.3
microscada_pro_sys600	eq	9.4
microscada_pro_sys600	eq	9.0
microscada_x_sys600	eq	10.1
microscada_x_sys600	eq	10.1.1
microscada_x_sys600	eq	10.2
microscada_x_sys600	eq	10.2.1
microscada_x_sys600	eq	10.3