CVE-2024-2378

Published Apr 30, 2024

Last updated 2 months ago

CVSS high 8.0
Scada
ICS

Overview

Description
A vulnerability exists in the web-authentication component of the SDM600. If exploited an attacker could escalate privileges on af-fected installations.
Source
cybersecurity@hitachienergy.com
NVD status
Deferred

Risk scores

CVSS 3.1

Type
Secondary
Base score
8
Impact score
6
Exploitability score
1.3
Vector string
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity
HIGH

Weaknesses

cybersecurity@hitachienergy.com
CWE-863

Social media

Hype score
Not currently trending

Related CVEs

  1. CVE-2024-10085
  2. Android Framework Integer Overflow Vulnerability•CVE-2025-48595
  3. A configuration weakness in the device’s remote management service allows an authenticated session to be established over a communication channel intended solely for vehicle-charger signaling. The service is accessible on interfaces exposed through the charging connector, and it accepts a default administrative credential. A malicious device physically connected to the charging interface could leverage this misconfiguration to obtain full administrative access.•CVE-2026-9039
  4. Ubiquiti UniFi OS Improper Access Control Vulnerability•CVE-2026-34908
  5. Ubiquiti UniFi OS Path Traversal Vulnerability•CVE-2026-34909

References

Sources include official advisories and independent security research.