Skip to content
OpenAdvisories

Product · mySCADA

myPRO Runtime

7 known vulnerabilities.

5 results · Clear filters · Feed

  • Critical 9.8

    mySCADA myPRO Manager OS Command Injection

    mySCADA myPRO does not properly neutralize POST requests sent to a specific port with email information. This vulnerability could be exploited by an attacker to execute arbitrary commands on the affected system.

  • Critical 9.8

    mySCADA myPRO Manager OS Command Injection

    mySCADA myPRO does not properly neutralize POST requests sent to a specific port with version information. This vulnerability could be exploited by an attacker to execute arbitrary commands on the affected system.

  • Critical 9.8

    mySCADA myPRO Missing Authentication for Critical Function

    The administrative interface listens by default on all interfaces on a TCP port and does not require authentication when being accessed.

  • Critical 10.0

    mySCADA myPRO OS Command Injection

    An OS Command Injection vulnerability exists within myPRO Manager. A parameter within a command can be exploited by an unauthenticated remote attacker to inject arbitrary operating system commands.

  • Critical 10.0
    CVE-2024-47407 Public exploit EPSS 64%

    mySCADA myPRO OS Command Injection

    A parameter within a command does not properly validate input within myPRO Manager which could be exploited by an unauthenticated remote attacker to inject arbitrary operating system commands.