CVE-2024-3982CWE-294

An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a…

High · published August 27, 2024

CVSS v3.1
8.2
EPSS
0%
Percentile
11.6
In the wild
Unconfirmed
What it is

An attacker with local access to machine where MicroSCADA X

SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level

is not enabled and only users with administrator rights can enable it.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00217 · 11.6th percentile
Weakness
CWE-294 · Authentication Bypass by Capture-replay
Published
2024-08-27T12:47Z
EPSS history
Timeline
  • 27 AUG 12:47Z
    An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a…
    cvelistv5