Description
mySCADA myDESIGNER Versions 8.20.0 and prior fails to properly validate contents of an imported project file, which may make the product vulnerable to a path traversal payload. This vulnerability may allow an attacker to plant files on the file system in arbitrary locations or overwrite existing files, resulting in remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| mySCADA | myDESIGNER | All – ≤ 8.20.0 | — |
Advisories 1
- ICSA-21-313-04 mySCADA myDESIGNER CISA ICS & IT advisories · Nov 9, 2021