Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2024-45369

mySCADA myPRO Improper Authentication

The web application uses a weak authentication mechanism to verify that a request is coming from an authenticated and authorized resource.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Myscada
Products
Mypro Manager Mypro Runtime
CVE-2024-47138

mySCADA myPRO Missing Authentication for Critical Function

The administrative interface listens by default on all interfaces on a TCP port and does not require authentication when being accessed.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Myscada
Products
Mypro Manager Mypro Runtime
CVE-2024-47407

mySCADA myPRO OS Command Injection

A parameter within a command does not properly validate input within myPRO Manager which could be exploited by an unauthenticated remote attacker to inject arbitrary operating system commands.

CVSS 4.0 · 10 Critical EPSS 63.8% KEV · Not listed
Vendors
Myscada
Products
Mypro Manager Mypro Runtime
CVE-2024-50054

mySCADA myPRO Path Traversal

The back-end does not sufficiently verify the user-controlled filename parameter which makes it possible for an attacker to perform a path traversal attack and retrieve arbitrary files from the file system.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Myscada
Products
Mypro Manager Mypro Runtime
CVE-2024-52034

mySCADA myPRO OS Command Injection

An OS Command Injection vulnerability exists within myPRO Manager. A parameter within a command can be exploited by an unauthenticated remote attacker to inject arbitrary operating system commands.

CVSS 4.0 · 10 Critical EPSS 1.7% KEV · Not listed
Vendors
Myscada
Products
Mypro Manager Mypro Runtime