Severity
High
Analysis Summary
CVE-2022-3388
An input validation vulnerability exists in the Monitor Pro interface of MicroSCADA Pro and MicroSCADA X SYS600. An authenticated user could launch an administrator level remote code execution regardless of the authenticated user’s role.
Impact
Unauthorized Access
Indicators Of Compromise
CVE
- CVE-2022-3388
Affected Vendors
Mitsubishi Electric
Affected Products
- SYS600 10.4 and earlier
- SYS600 9.4 FP2 Hotfix 4 and earlier versions
Remediation
Refer to CISA-CERT Advisory for the patch, upgrade, or suggested workaround information.
CISA-CERT Advisory