Skip to content
OpenAdvisories
Critical ICSA-25-023-01 2 CVEs

mySCADA myPRO Manager

Published Jan 23, 2025 · Updated Jan 23, 2025

Vendor: mySCADA Product: myPRO Manager Product: myPRO Runtime

Summary

Successful exploitation of these vulnerabilities could allow a remote attacker to execute arbitrary commands or disclose sensitive information.

Vulnerabilities 2

  • Critical 9.8
    CVE-2025-20014

    mySCADA myPRO Manager OS Command Injection

    mySCADA myPRO does not properly neutralize POST requests sent to a specific port with version information. This vulnerability could be exploited by an attacker to execute arbitrary commands on the affected system.

    mySCADA myPRO Manager myPRO Runtime
  • Critical 9.8
    CVE-2025-20061

    mySCADA myPRO Manager OS Command Injection

    mySCADA myPRO does not properly neutralize POST requests sent to a specific port with email information. This vulnerability could be exploited by an attacker to execute arbitrary commands on the affected system.

    mySCADA myPRO Manager myPRO Runtime

Revision history

  1. #1

    Initial Publication

References