319 matches found
PT-2024-33891 · Myscada · Myscada Mypro Manager
Name of the Vulnerable Software and Affected Versions: mySCADA myPRO Manager affected versions not specified Description: The issue arises from insufficient verification of the user-controlled filename parameter by the back-end, allowing an attacker to perform a path traversal attack. This enable...
mySCADA myPro Hard-coded Telnet Password (CVE-2024-4708
Binary data myscadamyprocve-2024-4708.nbin...
mySCADA myPRO Hard-Coded Credentials Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of mySCADA myPRO. Authentication is not required to exploit this vulnerability. The specific flaw exists within the telnet service, which listens on TCP port 5005 by default. The issue results from the...
Metasploit Weekly Wrap-Up 08/02/2024
Metasploit goes to Hacker Summer Camp Next week, Metasploit will have demos at both Black Hat and DEF CON where the latest functionality from this year will be presented. The Black Hat demo will be on Thursday the 8th from 10:10 to 11:25 and the DEF CON demo will be on Saturday the 10th from 12:0...
mySCADA MyPRO Authenticated Command Injection Exploit
An authenticated command injection vulnerability exists in MyPRO versions 8.28.0 and below from mySCADA. The vulnerability can be exploited by a remote attacker to inject arbitrary operating system commands which will get executed in the context of NT AUTHORITY\SYSTEM. class MetasploitModule...
mySCADA MyPRO Authenticated Command Injection
class MetasploitModule 'mySCADA MyPRO Authenticated Command Injection CVE-2023-28384', 'Description' = %q Authenticated Command Injection in MyPRO MSFLICENSE, 'Author' = 'Michael Heinzl', Vulnerability discovery & MSF module 'References' = 'URL',...
mySCADA MyPRO Authenticated Command Injection (CVE-2023-28384)
Authenticated Command Injection in MyPRO use exploit/windows/scada/myprocmdexe msf exploitmyprocmdexe show targets ...targets... msf exploitmyprocmdexe set TARGET msf exploitmyprocmdexe show options ...show and set options... msf exploitmyprocmdexe exploit class MetasploitModule 'mySCADA MyPRO...
mySCADA myPRO Trust Management Issues Vulnerabilities
mySCADA myPRO is a software application. myPRO is a professional HMI/SCADA system designed primarily for the visualization and control of industrial processes. A trust management issue vulnerability exists in versions of mySCADA myPRO prior to 8.31.0 that stems from the use of hardcoded passwords...
CVE-2024-4708
mySCADA myPRO uses a hard-coded password which could allow an attacker to remotely execute code on the affected device...
CVE-2024-4708
mySCADA myPRO uses a hard-coded password which could allow an attacker to remotely execute code on the affected device...
CVE-2024-4708 mySCADA myPRO Use of Hard-coded Password
mySCADA myPRO uses a hard-coded password which could allow an attacker to remotely execute code on the affected device...
CVE-2024-4708 mySCADA myPRO Use of Hard-coded Password
mySCADA myPRO uses a hard-coded password which could allow an attacker to remotely execute code on the affected device...
CVE-2024-4708
The connected advisories confirm CVE-2024-4708 affects mySCADA myPRO (versions before 8.31.0) due to a hard-coded credential in the telnet service (listening on TCP 5005). This could enable remote code execution over the network without authentication, running with the service account. Remediatio...
mySCADA myPRO
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : mySCADA Equipment : myPRO Vulnerability : Use of Hard-coded Password 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to remotely execute code on the...
PT-2024-4546 · Unknown · Myscada Mypro
Name of the Vulnerable Software and Affected Versions: mySCADA myPRO affected versions not specified Description: The issue is related to the use of hard-coded credentials in mySCADA myPRO, which could allow a remote attacker to execute code on the affected device. The hardcoded password is bruml...
The vulnerability of the mySCADA myPRO industrial process visualization and control system lies in insufficient validation of the arguments transmitted in commands, allowing a hacker to execute arbitrary code in the operating system.
The vulnerability of the mySCADA myPRO industrial process visualization and control system is related to insufficient verification of the arguments sent in commands. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code in the operating system...
The vulnerability of the mySCADA myPRO industrial process visualization and control system lies in insufficient validation of the arguments transmitted in commands, allowing a hacker to execute arbitrary code in the operating system.
The vulnerability of the mySCADA myPRO industrial process visualization and control system is related to insufficient verification of the arguments sent in commands. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the operating system...
mySCADA myPRO OS Command Injection Vulnerability (CNVD-2023-38197)
mySCADA myPRO is a software application. myPRO is a professional HMI/SCADA system designed primarily for the visualization and control of industrial processes. An operating system command injection vulnerability exists in mySCADA myPRO 8.26.0 and earlier versions, which can be exploited by an...
mySCADA myPRO OS Command Injection Vulnerability (CNVD-2023-38196)
mySCADA myPRO is a software application. myPRO is a professional HMI/SCADA system designed primarily for the visualization and control of industrial processes. An operating system command injection vulnerability exists in mySCADA myPRO 8.26.0 and earlier versions, which can be exploited by an...