Skip to content
OpenAdvisories
Critical ICSA-23-096-06 5 CVEs

mySCADA myPRO

Published Apr 10, 2023 · Updated Apr 10, 2023

Vendor: mySCADA Product: myPRO

Summary

Successful exploitation of this vulnerability could allow an authenticated user to inject arbitrary operating system commands.

Vulnerabilities 5

  • High 8.8
    CVE-2023-28384 Public exploit EPSS 45%

    CVE-2023-28384

    mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands.

    mySCADA mySCADA myPRO
  • High 8.8
    CVE-2023-28400 EPSS 25%

    CVE-2023-28400

    mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands.

    mySCADA mySCADA myPRO
  • High 8.8
    CVE-2023-28716

    CVE-2023-28716

    mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands.

    mySCADA mySCADA myPRO
  • High 8.8
    CVE-2023-29150

    CVE-2023-29150

    mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands.

    mySCADA mySCADA myPRO
  • High 8.8
    CVE-2023-29169

    CVE-2023-29169

    mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands.

    mySCADA mySCADA myPRO

Revision history

  1. #1

    CSAF Creation Date

References