Skip to content
OpenAdvisories
High ICSA-21-217-03 4 CVEs

ICSA-21-217-03_mySCADA myPRO

Published Aug 5, 2021 · Updated Aug 5, 2021

Vendor: mySCADA Product: myPRO

Summary

Michael Heinzl reported these vulnerabilities to CISA.

Vulnerabilities 4

  • High 8.2
    CVE-2021-33013

    mySCADA myPRO Improper Access Control

    mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive system information.

    mySCADA myPRO
  • High 7.5
    CVE-2021-27505

    mySCADA myPRO Exposure of Information Through Directory Listing

    mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive directory listing information.

    mySCADA myPRO
  • High 7.5
    CVE-2021-33005

    mySCADA myPRO Path Traversal

    mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to arbitrary directories.

    mySCADA myPRO
  • High 7.5
    CVE-2021-33009

    mySCADA myPRO Unrestricted Upload of File with Dangerous Type

    mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to the file system.

    mySCADA myPRO

Revision history

  1. #1

    ICSA-21-217-03 mySCADA myPRO

References