CVE-2025-20061 mySCADA myPRO Manager OS Command Injection

mySCADA myPRO does not properly neutralize POST requests sent to a specific port with email information. This vulnerability could be exploited by an attacker to execute arbitrary commands on the affected system...

CVE-2025-20061

CVE-2025-20061 affects mySCADA myPRO. Concrete details: an OS command injection vulnerability exists where POST requests to a specific port (web service on 34022 per ZDI entry) containing an email parameter can lead to arbitrary command execution. Root cause: inadequate sanitization/validation of...