High severity · published Mar 27, 2024
CVE-2024-2097
An authenticated malicious client can send a special LINQ query to execute arbitrary code remotely (RCE) on the SCM server from List control, and execute the arbitrary code on the…
7.5
CVSS
0.5%
EPSS
No
On KEV
Description
An authenticated malicious client can send a special LINQ query
to execute arbitrary code remotely (RCE) on the SCM server
from List control, and execute the arbitrary code on the same
system where SCMArchivedEventViewerTool is installed in the
case of SCM Tools.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MS
MACH SCM Server · Hitachi Energy
4.0 through 4.38.3 · source: vendor
MS
MACH SCM Tools · Hitachi Energy
1.0 through 1.8 · source: vendor
MA
Modular Advanced Control For Hvdc · Hitachienergy
4.0 through 4.38 · source: CISA