Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-20061 EUVD-2025-2147GHSA-8226-6jj5-9jvr

mySCADA myPRO Manager OS Command Injection

Published Jan 29, 2025 · Updated Feb 12, 2025 · Assigned by icscert

Description

mySCADA myPRO does not properly neutralize POST requests sent to a specific port with email information. This vulnerability could be exploited by an attacker to execute arbitrary commands on the affected system.

Affected products

VendorProductAffectedFixed
mySCADA myPRO Manager < 1.3 1.3
mySCADA myPRO Runtime < 9.2.1 9.2.1

Advisories 1

References