Code injection

2018-05-2816:29:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.6%

JSON

mySCADA myPRO 7 allows remote attackers to discover all ProjectIDs in a project by sending all of the prj parameter values from 870000 to 875000 in t=0&rq=0 requests to TCP port 11010.

CPENameOperatorVersion
myproeq7.0

CPE	Name	Operator	Version
	mypro	eq	7.0

References

github.com/EmreOvunc/mySCADA-myPRO-7-projectID-Disclosure

www.emreovunc.com/blog/en/mypro_enum_projectid.rb