2 lines
4.6 KiB
JSON
2 lines
4.6 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"MicroSCADA Pro SYS600","vendor":"Hitachi Energy","versions":[{"status":"affected","version":"9.0"}]},{"defaultStatus":"unaffected","product":"MicroSCADA X SYS600","vendor":"Hitachi Energy","versions":[{"status":"affected","version":"10.0"}]}],"source":"cybersecurity@hitachienergy.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.0:*:*:*:*:*:*:*","matchCriteriaId":"04AC7D20-659E-4844-A5A1-5B995FDB1B44","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.1:*:*:*:*:*:*:*","matchCriteriaId":"0A63E12C-E39C-420F-AEA2-377A60E03A28","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.2:*:*:*:*:*:*:*","matchCriteriaId":"FCD469ED-619F-4075-923A-8D6E15245831","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.3:*:*:*:*:*:*:*","matchCriteriaId":"0577CAD7-1C5C-40D6-B20B-56F532642583","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_pro_sys600:9.4:*:*:*:*:*:*:*","matchCriteriaId":"ECDCF4E1-FCCC-4984-AE92-3C188B469E63","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_x_sys600:10:*:*:*:*:*:*:*","matchCriteriaId":"606A7937-B800-4862-9B38-91E10BD54184","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1:*:*:*:*:*:*:*","matchCriteriaId":"572594C5-7BDF-4555-954E-59AC83373E0B","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E9F9C6EE-D049-42E7-8843-9C732DCB1E49","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:*","matchCriteriaId":"2D603FC1-851F-49DD-931C-E74F142F6281","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8617D0B8-0516-4CA2-9CFA-B9B65D8E125F","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:*","matchCriteriaId":"EC293ABD-343C-4DE1-BE14-E3033DE094AE","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"571AF4DB-6A32-49CF-B8E9-8224A084BE35","vulnerable":true},{"criteria":"cpe:2.3:a:hitachienergy:microscada_x_sys600:10.4:*:*:*:*:*:*:*","matchCriteriaId":"9E8462B2-9E02-414C-96DA-98C812089F56","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA\nPro and MicroSCADA X SYS600. An authenticated user can launch an administrator level remote code execution irrespective of the authenticated user's role."},{"lang":"es","value":"Existe una vulnerabilidad de validación de entrada en la interfaz Monitor Pro de MicroSCADA Pro y MicroSCADA X SYS600. Un usuario autenticado puede iniciar una ejecución remota de código a nivel de administrador, independientemente de su rol."}],"id":"CVE-2022-3388","lastModified":"2026-06-17T04:59:26.243","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.0,"impactScore":6.0,"source":"cybersecurity@hitachienergy.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2022-11-21T19:15:13.353","references":[{"source":"cybersecurity@hitachienergy.com","tags":["Vendor Advisory"],"url":"https://search.abb.com/library/Download.aspx?DocumentID=8DBD000123&LanguageCode=en&DocumentPartId=&Action=Launch&elqaid=4293&elqat=1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://search.abb.com/library/Download.aspx?DocumentID=8DBD000123&LanguageCode=en&DocumentPartId=&Action=Launch&elqaid=4293&elqat=1"}],"sourceIdentifier":"cybersecurity@hitachienergy.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"cybersecurity@hitachienergy.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-20"}],"source":"nvd@nist.gov","type":"Primary"}]}
|