2 lines
4.4 KiB
JSON
2 lines
4.4 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MicroSCADA X SYS600","vendor":"Hitachi Energy","versions":[{"lessThanOrEqual":"10.5","status":"affected","version":"10.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"MicroSCADA Pro SYS600","vendor":"Hitachi Energy","versions":[{"lessThanOrEqual":"9.4 FP2 HF5","status":"affected","version":"9.4 FP2 HF1","versionType":"custom"},{"status":"affected","version":"9.4 FP1","versionType":"custom"}]}],"source":"cybersecurity@hitachienergy.com"},{"affectedData":[{"cpes":["cpe:2.3:a:hitachienergy:microscada_sys600:10.0:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"microscada_sys600","vendor":"hitachienergy","versions":[{"lessThanOrEqual":"10.5","status":"affected","version":"10.0","versionType":"custom"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:fixpack_1:*:*:*:*:*:*","matchCriteriaId":"BC4CE02B-F8CF-4A9E-B9FC-AEFE59F4BCE2","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:fixpack_2_hf1:*:*:*:*:*:*","matchCriteriaId":"0B90ED6E-68E4-4C14-B275-F44BAC1B9C5C","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:fixpack_2_hf2:*:*:*:*:*:*","matchCriteriaId":"196E08EA-807C-4B7B-981A-96D106AC328B","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:fixpack_2_hf3:*:*:*:*:*:*","matchCriteriaId":"680FAE83-9D7A-4AD9-AFBE-480FD105ADC9","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:fixpack_2_hf4:*:*:*:*:*:*","matchCriteriaId":"014C8428-8F88-4C3D-B9B1-87DE26867471","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:fixpack_2_hf5:*:*:*:*:*:*","matchCriteriaId":"06AFA271-0785-4526-B7DA-FA00672CC5B5","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_x_sys600:*:*:*:*:*:*:*:*","matchCriteriaId":"AEAAFA90-ACFF-47E2-A23D-728912D74B99","versionEndExcluding":"10.6","versionStartIncluding":"10.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The MicroSCADA Pro/X SYS600 product allows an authenticated user input to control or influence paths or file names\nthat are used in filesystem operations. If exploited the vulnerability allows the attacker to access or modify system files or\nother files that are critical to the application."},{"lang":"es","value":"El producto permite que el usuario controle o influya en las rutas o nombres de archivos que se utilizan en las operaciones del sistema de archivos, lo que permite al atacante acceder o modificar archivos del sistema u otros archivos que son críticos para la aplicación."}],"id":"CVE-2024-3980","lastModified":"2026-06-17T07:45:35.883","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.9,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.1,"impactScore":6.0,"source":"cybersecurity@hitachienergy.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-3980","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-08-28T14:10:05.924302Z","version":"2.0.3"}}]},"published":"2024-08-27T13:15:05.210","references":[{"source":"cybersecurity@hitachienergy.com","tags":["Vendor Advisory"],"url":"https://publisher.hitachienergy.com/preview?DocumentID=8DBD000160&LanguageCode=en&DocumentPartId=&Action=Launch"}],"sourceIdentifier":"cybersecurity@hitachienergy.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"cybersecurity@hitachienergy.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-22"}],"source":"nvd@nist.gov","type":"Primary"}]}
|