CVE-2021-33013 mySCADA myPRO Improper Access Control

mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive system information...

CVE-2021-33013

The CVE-2021-33013 vulnerability affects mySCADA myPRO prior to version 8.20.0, where an improper access control allows unauthenticated read access to sensitive system information. This is documented across multiple sources (NVD entry and ICSA briefing) with CVSS v3 base score up to 8.2 (HIGH) an...

CVE-2021-33009 mySCADA myPRO Unrestricted Upload of File with Dangerous Type

mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to the file system...

CVE-2021-33009 mySCADA myPRO Unrestricted Upload of File with Dangerous Type

mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to the file system...

CVE-2021-33009

CVE-2021-33009 affects mySCADA myPRO prior to version 8.20.0. An unauthenticated remote attacker can upload arbitrary files to the file system due to an unrestricted upload vulnerability (CWE-434). CVSSv3 base score 7.5 (HIGH) with network access and no authentication; impact on integrity is HIGH...

CVE-2021-33005 mySCADA myPRO Path Traversal

mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to arbitrary directories...

CVE-2021-33005

CVE-2021-33005 is a path traversal vulnerability in mySCADA myPRO prior to version 8.20.0. An unauthenticated remote attacker can upload arbitrary files to arbitrary directories by exploiting improper filtering of path components. Affected product: mySCADA myPRO (industrial HMI/SCADA). Impact des...

CVE-2021-33005 mySCADA myPRO Path Traversal

mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to arbitrary directories...

CVE-2021-27505 mySCADA myPRO Exposure of Information Through Directory Listing

mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive directory listing information...

CVE-2021-27505 mySCADA myPRO Exposure of Information Through Directory Listing

mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive directory listing information...

CVE-2021-27505

CVE-2021-27505 affects mySCADA myPRO prior to 8.20.0. The exposed issue is Exposure of Information Through Directory Listing due to improper access control, allowing unauthorized read access to sensitive directory listing information. Affected product: myPRO (industrial HMI/SCADA) with versions b...

PT-2022-10188 · Myscada · Myscada Mypro

Name of the Vulnerable Software and Affected Versions: mySCADA myPRO versions prior to 8.20.0 Description: The issue concerns unauthorized read access to sensitive system information due to lack of restrictions. Recommendations: For mySCADA myPRO versions prior to 8.20.0, update to version 8.20.0...

CVE-2022-0999

An authenticated user may be able to misuse parameters to inject arbitrary operating system commands into mySCADA myPRO versions 8.25.0 and prior...

CVE-2022-0999

An authenticated user may be able to misuse parameters to inject arbitrary operating system commands into mySCADA myPRO versions 8.25.0 and prior...

Authentication flaw

An authenticated user may be able to misuse parameters to inject arbitrary operating system commands into mySCADA myPRO versions 8.25.0 and prior...

CVE-2022-0999 mySCADA myPRO Command Injection

An authenticated user may be able to misuse parameters to inject arbitrary operating system commands into mySCADA myPRO versions 8.25.0 and prior...

CVE-2022-0999

CVE-2022-0999 affects mySCADA myPRO, versions 8.25.0 and earlier. It stems from improper neutralization of special elements used in a command (CWE-77) that allows an authenticated user to inject arbitrary operating system commands. Impacts reported include high-severity outcomes (CVE metrics show...

CVE-2022-0999 mySCADA myPRO Command Injection

An authenticated user may be able to misuse parameters to inject arbitrary operating system commands into mySCADA myPRO versions 8.25.0 and prior...

mySCADA myPRO 操作系统操作系统命令注入漏洞

mySCADA myPRO is a software application. myPRO is a professional HMI/SCADA system designed primarily for the visualization and control of industrial processes. An operating system command injection vulnerability exists in mySCADA myPRO 8.25.0 and earlier versions. The vulnerability arises from th...

mySCADA myPRO

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: mySCADA Equipment: myPRO Vulnerability: Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow arbitrary operating system commands injection. 3. TECHNICAL...