Vulnerability Description
Improper Input Validation vulnerability in Hitachi Energy MicroSCADA X SYS600 while reading a specific configuration file causes a buffer-overflow that causes a failure to start the SYS600. The configuration file can only be accessed by an administrator access. This issue affects: Hitachi Energy MicroSCADA X SYS600 version 10 to version 10.3.1. cpe:2.3:a:hitachienergy:microscada_x_sys600:10:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.1.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.2.1:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:microscada_x_sys600:10.3.1:*:*:*:*:*:*:*
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hitachienergy | Microscada X Sys600 | >= 10.0, <= 10.3.1 |
| Hitachienergy | Sys600 | - |
Related Weaknesses (CWE)
References
- https://publisher.hitachienergy.com/preview?DocumentId=8DBD000106&languageCode=e
- https://search.abb.com/library/Download.aspx?DocumentID=8DBD000106&LanguageCode=
FAQ
What is CVE-2022-1778?
CVE-2022-1778 is a vulnerability with a CVSS score of 7.5 (HIGH). Improper Input Validation vulnerability in Hitachi Energy MicroSCADA X SYS600 while reading a specific configuration file causes a buffer-overflow that causes a failure to start the SYS600. The config...
How severe is CVE-2022-1778?
CVE-2022-1778 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-1778?
Check the references section above for vendor advisories and patch information. Affected products include: Hitachienergy Microscada X Sys600, Hitachienergy Sys600.