RSS   Podatności dla 'Mypro'   RSS

2022-04-11
 
CVE-2022-0999

CWE-78
 

 
An authenticated user may be able to misuse parameters to inject arbitrary operating system commands into mySCADA myPRO versions 8.25.0 and prior.

 
2021-12-23
 
CVE-2021-22657

CWE-78
 

 
mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.

 
 
CVE-2021-23198

CWE-78
 

 
mySCADA myPRO: Versions 8.20.0 and prior has a feature where the password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.

 
 
CVE-2021-43981

CWE-78
 

 
mySCADA myPRO: Versions 8.20.0 and prior has a feature to send emails, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.

 
 
CVE-2021-43984

CWE-78
 

 
mySCADA myPRO: Versions 8.20.0 and prior has a feature where the firmware can be updated, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.

 
 
CVE-2021-43985

CWE-288
 

 
An unauthenticated remote attacker can access mySCADA myPRO Versions 8.20.0 and prior without any form of authentication or authorization.

 
 
CVE-2021-43987

CWE-912
 

 
An additional, nondocumented administrative account exists in mySCADA myPRO Versions 8.20.0 and prior that is not exposed through the web interface, which cannot be deleted or changed through the regular web interface.

 
 
CVE-2021-43989

CWE-916
 

 
mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes.

 
2018-05-28
 
CVE-2018-11517

CWE-200
 

 
mySCADA myPRO 7 allows remote attackers to discover all ProjectIDs in a project by sending all of the prj parameter values from 870000 to 875000 in t=0&rq=0 requests to TCP port 11010.

 
2018-05-20
 
CVE-2018-11311

CWE-798
 

 
A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attackers to access the FTP server on port 2121, and upload files or list directories, by entering these credentials.

 


Copyright 2022, cxsecurity.com

 

Back to Top