SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code (RCE) on the SCM Server remotely. Malicious clients can execute any command by using this RCE vulnerability.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: Hitachi Energy
Published: 2024-03-27T02:03:57.253Z
Updated: 2024-08-06T19:00:32.693Z
Reserved: 2024-01-10T15:23:18.527Z
Link: CVE-2024-0400

Updated: 2024-08-01T18:04:49.537Z

Status : Awaiting Analysis
Published: 2024-03-27T03:15:10.697
Modified: 2024-11-21T08:46:30.080
Link: CVE-2024-0400

No data.