CVE-2024-7940
High
Description
The product exposes a service that is intended for local only to all network interfaces without any authentication.
SeverityHigh
CVSS8.3
Exploit probability—
ProductHitachienergy Microscada X
PublishedAug 27, 2024
First seenAug 27, 2024
Weakness typeCWE-306Missing authentication for critical function
How to fix
Update
- hitachienergy microscada_x_sys60010.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hitachienergy microscada_x_sys600 | 10.2 ≤ v < 10.6 | 10.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.