mySCADA myPRO 7 - Hardcoded Credentials Vulnerability

Exploit Title: mySCADA myPRO v7 Hardcoded Credentials Exploit Author: Emre ÖVÜNÇ Vendor Homepage: http://myscada.org Software Link: https://www.myscada.org/mypro/ Version: v7.0.45 Tested on: Windows/Linux CVE-2018-11311 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11311...

mySCADA myPRO 7 - Hardcoded Credentials

Exploit Title: mySCADA myPRO v7 Hardcoded Credentials Date: 2018-07-02 Exploit Author: Emre ÖVÜNÇ Vendor Homepage: http://myscada.org Software Link: https://www.myscada.org/mypro/ Version: v7.0.45 Tested on: Windows/Linux CVE-2018-11311 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1131...

mySCADA myPRO 7 Authentication Bypass (CVE-2018-11311)

An authentication bypass vulnerability has been reported in mySCADA myPRO 7 FTP Server. The vulnerability is due to the presence of hard coded credentials. A remote attacker can exploit this vulnerability by accessing the FTP Server using those credentials...

CVE-2018-11311

The CVE-2018-11311 entry concerns mySCADA myPRO 7, where the FTP server’s credentials are hardcoded (username: myscada, password: Vikuk63) in mys cadagate.exe. This allows remote authentication to the FTP service on port 2121, enabling actions such as uploading files or listing directories. Conne...