CVE-2024-0400

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-03-27 · updated 2026-06-17
Weakness: CWE-94

Description

SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SCM server, for customized filtering. An Authenticated malicious client can send a specially crafted code to skip the validation and execute arbitrary code (RCE) on the SCM Server remotely. Malicious clients can execute any command by using this RCE vulnerability.

Affected products

Hitachi Energy Mach Scm: from 4.0 through 4.38

References

https://publisher.hitachienergy.com/preview?DocumentId=8DBD000189&languageCode=en&Preview=true
https://publisher.hitachienergy.com/preview?DocumentId=8DBD000189&languageCode=en&Preview=true

Get alerted when CVE-2024-0400 or the next vulnerability affects your stack