Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2531▼ 362 respecto a la semana anterior
Críticas / altas1338▲ 72 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 6 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (8.8) | 0.50% | — | Hitachienergy Microscada PRO Sys600Hitachienergy Microscada X Sys600 | 27/8/2024 | 17/6/2026 | A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an authenticated attacker to inject code towards persistent data. Note that to successfully exploit this vulnerability an attacker must have a valid credential. | |
| Analizada | Alta (8.8) | 0.61% | — | Hitachienergy Microscada PRO Sys600Hitachienergy Microscada X Sys600 | 27/8/2024 | 17/6/2026 | The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names that are used in filesystem operations. If exploited the vulnerability allows the attacker to access or modify system files or other files that are critical to the application. | |
| Modificada | Alta (7.8) | 0.29% | — | Hitachienergy Microscada PRO Sys600Hitachienergy Microscada X Sys600 | 21/11/2022 | 17/6/2026 | An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role. | |
| Modificada | Crítica (9.8) | 71% | — | Hitachienergy Microscada PRO Sys600 | 29/4/2020 | 17/6/2026 | ABB MicroSCADA Pro SYS600 version 9.3 suffers from an instance of CWE-306: Missing Authentication for Critical Function. |