CVE-2024-3982: High severity hitachi energy microscada x sys600 vulnerability
An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enabled and only users with administrator rights can enable it.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3982?
CVE-2024-3982 is rated as a medium severity vulnerability, as it requires local access to exploit the session hijacking potential.
How do I fix CVE-2024-3982?
To fix CVE-2024-3982, ensure that session logging is not enabled unless necessary and limit user access to administrator only.
Who is impacted by CVE-2024-3982?
CVE-2024-3982 impacts users of the Hitachienergy MicroSCADA X SYS600 application versions from 10.0 to 10.6.
What can an attacker do with CVE-2024-3982?
An attacker with local access can exploit CVE-2024-3982 to hijack an established session by enabling session logging.
What are the prerequisites for exploiting CVE-2024-3982?
Exploiting CVE-2024-3982 requires local access to the machine where MicroSCADA X SYS600 is installed.