CVE-2024-3982 — Hitachi Energy / MicroSCADA SYS600

CVE-2024-3982

Hitachi Energy / MicroSCADA SYS600 PUBLISHED

Description (CNA)

An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enabled and only users with administrator rights can enable it.

Affected (CNA)

Vendor / product	Versions
Hitachi Energy / MicroSCADA SYS600	affected 10.0 through 10.5

CWE

CWE-294

References

https://publisher.hitachienergy.com/preview?DocumentID=8DBD000160&LanguageCode=en&DocumentPartId=&Action=Launch

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.