← CVE Intelligence

CVE-2024-0400

Hitachi Energy / MACH SCM PUBLISHED

Description (CNA)

SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code (RCE) on the SCM Server remotely. Malicious clients can execute any command by using this RCE vulnerability.

Affected (CNA)

Vendor / productVersions
Hitachi Energy / MACH SCMaffected 4.0 through 4.38

CWE

CWE-94

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.