Lucene search

IcscertCVELIST:CVE-2023-28384

HistoryApr 27, 2023 - 10:09 p.m.

CVE-2023-28384 CVE-2023-28384

2023-04-2722:09:56

icscert

www.cve.org

myscada

mypro

vulnerability

authenticated user

arbitrary commands

injection

operating system

AI Score

8.8

Confidence

High

EPSS

0.229

Percentile

96.6%

JSON

mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands.

CNA Affected

[
  {
    "vendor": "mySCADA Technologies",
    "product": "mySCADA myPRO",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "8.26.0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.cisa.gov/news-events/ics-advisories/icsa-23-096-06