CVE-2025-24865

The CVE-2025-24865 entry concerns mySCADA myPRO Manager where the administrative web interface can be accessed without authentication. The connected documents describe that this could let an attacker retrieve sensitive information and upload files without credentials, and the PT-2025-7040 entry a...

CVE-2025-22896

CVE-2025-22896 affects mySCADA myPRO Manager, where credentials are stored in cleartext. The vulnerability enables an attacker to obtain sensitive information via the affected component, with network access and no required user interaction per CVSS vectors in the source records. Connected documen...

CVE-2021-33005

CVE-2021-33005 is a path traversal vulnerability in mySCADA myPRO prior to version 8.20.0. An unauthenticated remote attacker can upload arbitrary files to arbitrary directories by exploiting improper filtering of path components. Affected product: mySCADA myPRO (industrial HMI/SCADA). Impact des...

CVE-2021-33009

CVE-2021-33009 affects mySCADA myPRO prior to version 8.20.0. An unauthenticated remote attacker can upload arbitrary files to the file system due to an unrestricted upload vulnerability (CWE-434). CVSSv3 base score 7.5 (HIGH) with network access and no authentication; impact on integrity is HIGH...

CVE-2025-25067

CVE-2025-25067 affects mySCADA myPRO Manager (HMI/SCADA). An OS command injection vulnerability originates from improper input validation, enabling a remote attacker to execute arbitrary OS commands over the network. CISA/ICS guidance notes the administrative web interface can be accessed without...

CVE-2021-33013

The CVE-2021-33013 vulnerability affects mySCADA myPRO prior to version 8.20.0, where an improper access control allows unauthenticated read access to sensitive system information. This is documented across multiple sources (NVD entry and ICSA briefing) with CVSS v3 base score up to 8.2 (HIGH) an...

CVE-2021-27505

CVE-2021-27505 affects mySCADA myPRO prior to 8.20.0. The exposed issue is Exposure of Information Through Directory Listing due to improper access control, allowing unauthorized read access to sensitive directory listing information. Affected product: myPRO (industrial HMI/SCADA) with versions b...

CVE-2025-23411

CVE-2025-23411 affects the mySCADA myPRO Manager. The connected sources confirm a cross-site request forgery (CSRF) vulnerability that could allow an attacker to obtain sensitive information by tricking a user to visit a malicious site. The vulnerability details across sources consistently descri...

CVE-2024-4708

The connected advisories confirm CVE-2024-4708 affects mySCADA myPRO (versions before 8.31.0) due to a hard-coded credential in the telnet service (listening on TCP 5005). This could enable remote code execution over the network without authentication, running with the service account. Remediatio...