PT-2021-24111
CVE-2021-44453
·
تاريخ النشر
2021-12-23
·
تاريخ التحديث
2022-01-05
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
mySCADA myPRO versions 8.20.0 and prior
Description:
The issue concerns a vulnerable debug interface in mySCADA myPRO, which includes a ping utility. This vulnerability may allow an attacker to inject arbitrary operating system commands.
Recommendations:
For versions 8.20.0 and prior, consider disabling the debug interface as a temporary workaround until a patch is available. Restrict access to the ping utility to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾