Vulners
Lucene search
| Reporter | Title | Published | Views | Family All 17 |
|---|---|---|---|---|
 | mySCADA MyPRO Authenticated Command Injection Exploit | 29 Jul 202400:00 | – | zdt |
 | The vulnerability of the mySCADA myPRO industrial process visualization and control system, related to insufficient verification of arguments transmitted in commands, allows a perpetrator to execute arbitrary code in the operating system. | 11 May 202300:00 | – | bdu_fstec |
 | CVE-2023-28384 | 26 Jul 202414:26 | – | circl |
 | mySCADA myPRO 操作系统命令注入漏洞 | 27 Apr 202300:00 | – | cnnvd |
 | CVE-2023-28384 CVE-2023-28384 | 27 Apr 202322:09 | – | cvelist |
 | mySCADA myPRO | 10 Apr 202317:28 | – | ics |
 | mySCADA MyPRO Authenticated Command Injection (CVE-2023-28384) | 26 Jul 202418:51 | – | metasploit |
 | CVE-2023-28384 | 27 Apr 202323:15 | – | nvd |
 | CVE-2023-28384 | 27 Apr 202323:15 | – | osv |
 | mySCADA MyPRO Authenticated Command Injection | 29 Jul 202400:00 | – | packetstorm |
10
[
{
"vendor": "mySCADA Technologies",
"product": "mySCADA myPRO",
"versions": [
{
"status": "affected",
"version": "0",
"lessThanOrEqual": "8.26.0",
"versionType": "custom"
}
]
}
]| Source | Link |
|---|---|
| cisa | www.cisa.gov/news-events/ics-advisories/icsa-23-096-06 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| t | request body | l.fcgi | Authenticated command injection via POST parameter to l.fcgi used for version check and exploitation. | CWE-78 |
| addr | request body | sss2 | Command injection via addr field in JSON payload sent to sss2 (authenticated). | CWE-78 |
| type | request body | sss2 | Command injection via addr field in JSON payload sent to sss2 (authenticated). | CWE-78 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 05:47Current
8.6High risk
Vulners AI Score8.6
CVSS 3.18.8
EPSS0.4481
SSVC