← CVE Intelligence

CVE-2024-2097

Hitachi Energy / MACH SCM Server PUBLISHED

Description (CNA)

An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely (RCE) on the SCM server from List control, and execute the arbitrary code on the same system where SCMArchivedEventViewerTool is installed in the case of SCM Tools.

Affected (CNA)

Vendor / productVersions
Hitachi Energy / MACH SCM Serveraffected 4.0 through 4.38.3
Hitachi Energy / MACH SCM Toolsaffected 1.0 through 1.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.