CVE-2018-11517

2022-10-0316:21:51

mitre

www.cve.org

myscada mypro

project discovery

tcp port 11010

5.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.6%

JSON

mySCADA myPRO 7 allows remote attackers to discover all ProjectIDs in a project by sending all of the prj parameter values from 870000 to 875000 in t=0&rq=0 requests to TCP port 11010.

References

github.com/EmreOvunc/mySCADA-myPRO-7-projectID-Disclosure

www.emreovunc.com/blog/en/mypro_enum_projectid.rb