Vulnerabilities (CVE)

Filtered by vendor Myscada Subscribe
Filtered by product Mypro
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-33013 1 Myscada 1 Mypro 2022-05-24 5.0 MEDIUM 7.5 HIGH
mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive system information.
CVE-2021-33009 1 Myscada 1 Mypro 2022-05-24 5.0 MEDIUM 7.5 HIGH
mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to the file system.
CVE-2021-33005 1 Myscada 1 Mypro 2022-05-24 5.0 MEDIUM 7.5 HIGH
mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to arbitrary directories.
CVE-2021-27505 1 Myscada 1 Mypro 2022-05-24 5.0 MEDIUM 7.5 HIGH
mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive directory listing information.
CVE-2021-43989 1 Myscada 1 Mypro 2021-12-29 5.0 MEDIUM 7.5 HIGH
mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes.
CVE-2017-12730 1 Myscada 1 Mypro 2019-10-09 7.2 HIGH 7.8 HIGH
An Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior. Application services utilize unquoted search path elements, which could allow an attacker to execute arbitrary code with elevated privileges.