mySCADA myPRO

🗓️ 10 Apr 2023 17:28:36Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 51 Views

mySCADA myPRO versions 8.26.0 and prior are vulnerable to OS Command Injection, allowing authenticated users to inject arbitrary OS commands. Upgrade to version 8.29.0 or higher for mitigation

Reporter	Title	Published	Views	Family All 63
0day.today	mySCADA MyPRO Authenticated Command Injection Exploit	29 Jul 202400:00	–	zdt
BDU FSTEC	The vulnerability of the mySCADA myPRO industrial process visualization and control system lies in the lack of measures to neutralize special elements used in the operating system’s commands. This allows attackers to execute arbitrary commands.	10 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mySCADA myPRO industrial process visualization and control system lies in insufficient validation of the arguments transmitted in commands, allowing a hacker to execute arbitrary code in the operating system.	11 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mySCADA myPRO industrial process visualization and control system, related to insufficient verification of arguments transmitted in commands, allows a perpetrator to execute arbitrary code in the operating system.	11 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mySCADA myPRO industrial process visualization and control system lies in insufficient validation of the arguments transmitted in commands, allowing a hacker to execute arbitrary code in the operating system.	11 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the mySCADA myPRO industrial process visualization and control system lies in insufficient validation of the arguments transmitted in commands, allowing a hacker to execute arbitrary code in the operating system.	11 May 202300:00	–	bdu_fstec
Circl	CVE-2023-28384	26 Jul 202414:26	–	circl
CNNVD	mySCADA myPRO 操作系统命令注入漏洞	27 Apr 202300:00	–	cnnvd
CNNVD	mySCADA myPRO 操作系统命令注入漏洞	27 Apr 202300:00	–	cnnvd
CNNVD	mySCADA myPRO 操作系统命令注入漏洞	27 Apr 202300:00	–	cnnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-096-06.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-096-06
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
us-cert	www.us-cert.cisa.gov/ics/Recommended-Practices
cisa	www.cisa.gov/ics
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

10 Apr 2023 17:28Current

9.3High risk

Vulners AI Score9.3

CVSS 3.18.8

EPSS0.4481

SSVC