CVE-2021-23198

mySCADA myPRO: Versions 8.20.0 and prior has a feature where the password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter...

CVE-2021-23198

mySCADA myPRO: Versions 8.20.0 and prior has a feature where the password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter...

CVE-2021-22657

mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter...

CVE-2021-22657

mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter...

Authorization

An unauthenticated remote attacker can access mySCADA myPRO Versions 8.20.0 and prior without any form of authentication or authorization...

Design/Logic Flaw

mySCADA myPRO: Versions 8.20.0 and prior has a feature where the firmware can be updated, which may allow an attacker to inject arbitrary operating system commands through a specific parameter...

Default credentials

mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes...

Design/Logic Flaw

mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter...

Design/Logic Flaw

mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inject arbitrary operating system commands...

Design/Logic Flaw

mySCADA myPRO: Versions 8.20.0 and prior has a feature where the password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter...

CVE-2021-43985

CVE-2021-43985 affects mySCADA myPRO, with an authentication bypass vulnerability in versions 8.20.0 and prior. An unauthenticated remote attacker can access the application without authentication or authorization via an alternative path/channel. The ICS advisory (ICSA-21-355-01) documents this v...

CVE-2021-43985 mySCADA myPRO

An unauthenticated remote attacker can access mySCADA myPRO Versions 8.20.0 and prior without any form of authentication or authorization...

CVE-2021-43981 mySCADA myPRO

mySCADA myPRO: Versions 8.20.0 and prior has a feature to send emails, which may allow an attacker to inject arbitrary operating system commands through a specific parameter...

CVE-2021-43989

The CVE-2021-43989 issue affects mySCADA myPRO versions 8.20.0 and earlier, where passwords are stored using MD5. The underlying risk is that MD5 password hashes may be cracked, exposing credential-related data. Reported in multiple sources (NVD/NVD-derived and ICS/CISA context), the vulnerabilit...

CVE-2021-43989 mySCADA myPRO

mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes...

CVE-2021-43981

The CVE-2021-43981 entry concerns mySCADA myPRO, affected up to version 8.20.0. The vulnerability is an OS command injection flaw introduced by a feature that sends emails, where a specific parameter can be exploited to inject arbitrary OS commands. Multiple connected sources (NVD entry, ICS advi...

CVE-2021-44453 mySCADA myPRO

mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inject arbitrary operating system commands...

CVE-2021-44453

Affected product: mySCADA myPRO (versions 8.20.0 and prior). Vulnerability: OS command injection via a vulnerable debug interface that includes a ping utility, allowing an attacker to inject arbitrary operating system commands through the interface. Impact (as stated): Remote code execution with ...

CVE-2021-43984 mySCADA myPRO

mySCADA myPRO: Versions 8.20.0 and prior has a feature where the firmware can be updated, which may allow an attacker to inject arbitrary operating system commands through a specific parameter...

CVE-2021-43984

The CVE-2021-43984 issue affects mySCADA myPRO up to version 8.20.0, where the firmware update feature may allow an attacker to inject arbitrary OS commands via a specific parameter. The vulnerability is categorized as an OS command injection with a high to critical impact (C/H/I/H) in multiple s...