← Database

CVE-2022-3388

HIGH CVSS: 8.8 Published: 2022-11-21 Modified: 2026-06-17

Description

An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role.

Affected Platforms

Hitachienergy Microscada X Sys600Hitachienergy Microscada Pro Sys600

Weakness Type

CWE-20, CWE-20

References