PT-2021-24111
CVE-2021-44453
·
Published
2021-12-23
·
Updated
2022-01-05
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
mySCADA myPRO versions 8.20.0 and prior
Description:
The issue concerns a vulnerable debug interface in mySCADA myPRO, which includes a ping utility. This vulnerability may allow an attacker to inject arbitrary operating system commands.
Recommendations:
For versions 8.20.0 and prior, consider disabling the debug interface as a temporary workaround until a patch is available. Restrict access to the ping utility to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾