Skip to content
Noroxi

mySCADA records

34 published records for vendor myscada.

Researcher profile

Entered KEV
0 · 0%
Weaponized
4 · 11.8%
Pre-auth RCE
8
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

34 records
  • CVE-2024-47407
    60This week

    mySCADA myPRO OS Command Injection

    CriticalCVSS 10.0WeaponizedEPSS 63%

    myscada · mypro managerNov 22, 2024

  • CVE-2025-24865
    60This week

    mySCADA myPRO Manager Missing Authentication for Critical Function

    CriticalCVSS 10.0WeaponizedEPSS 7%

    myscada · myproFeb 13, 2025

  • CVE-2025-22896
    60This week

    mySCADA myPRO Manager Cleartext Storage of Sensitive Information

    CriticalCVSS 9.2WeaponizedEPSS 3%

    myscada · myproFeb 13, 2025

  • CVE-2023-28384
    48Plan

    mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system comman

    HighCVSS 8.8WeaponizedEPSS 44%

    myscada · myproApr 27, 2023

  • CVE-2022-2234
    48Plan

    mySCADA myPRO Command Injection

    HighCVSS 8.8No exploitEPSS 43%

    myscada · myproAug 24, 2022

  • CVE-2021-43555
    42Plan

    mySCADA myDESIGNER Versions 8.20.0 and prior fails to properly validate contents of an imported project file, which may make the product vul

    HighCVSS 7.8No exploitEPSS 38%

    myscada · mydesignerNov 19, 2021

  • CVE-2023-28400
    42Plan

    mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system comman

    HighCVSS 8.8No exploitEPSS 24%

    myscada · myproApr 27, 2023

  • CVE-2018-11311
    41Plan

    A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attackers to access the FT

    CriticalCVSS 9.1Proof of conceptEPSS 15%

    myscada · myproMay 20, 2018

  • CVE-2024-52034
    41Plan

    mySCADA myPRO OS Command Injection

    CriticalCVSS 10.0No exploitEPSS 1%

    myscada · mypro managerNov 22, 2024

  • CVE-2021-43985
    39Monitor

    An unauthenticated remote attacker can access mySCADA myPRO Versions 8.20.0 and prior without any form of authentication or authorization.

    CriticalCVSS 9.8No exploitEPSS 1%

    myscada · myproDec 23, 2021

  • CVE-2021-44453
    39Monitor

    mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inje

    CriticalCVSS 9.8No exploitEPSS 1%

    myscada · myproDec 23, 2021

  • CVE-2021-43981
    39Monitor

    mySCADA myPRO: Versions 8.20.0 and prior has a feature to send emails, which may allow an attacker to inject arbitrary operating system comm

    CriticalCVSS 9.8No exploitEPSS 1%

    myscada · myproDec 23, 2021

  • CVE-2021-43984
    39Monitor

    mySCADA myPRO: Versions 8.20.0 and prior has a feature where the firmware can be updated, which may allow an attacker to inject arbitrary op

    CriticalCVSS 9.8No exploitEPSS 1%

    myscada · myproDec 23, 2021

  • CVE-2021-22657
    39Monitor

    mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitr

    CriticalCVSS 9.8No exploitEPSS 1%

    myscada · myproDec 23, 2021

  • CVE-2021-23198
    39Monitor

    mySCADA myPRO: Versions 8.20.0 and prior has a feature where the password can be specified, which may allow an attacker to inject arbitrary

    CriticalCVSS 9.8No exploitEPSS 1%

    myscada · myproDec 23, 2021

  • CVE-2021-43987
    39Monitor

    An additional, nondocumented administrative account exists in mySCADA myPRO Versions 8.20.0 and prior that is not exposed through the web in

    CriticalCVSS 9.8No exploitEPSS 1%

    myscada · myproDec 23, 2021

  • CVE-2025-25067
    37Monitor

    mySCADA myPRO Manager OS Command Injection

    CriticalCVSS 9.3No exploitEPSS 1%

    myscada · myproFeb 13, 2025

  • CVE-2024-4708
    37Monitor

    mySCADA myPRO Use of Hard-coded Password

    CriticalCVSS 9.3No exploitEPSS 0%

    myscada · myproJul 2, 2024

  • CVE-2024-47138
    37Monitor

    mySCADA myPRO Missing Authentication for Critical Function

    CriticalCVSS 9.3No exploitEPSS 0%

    myscada · mypro managerNov 22, 2024

  • CVE-2023-28716
    36Monitor

    mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system comman

    HighCVSS 8.8No exploitEPSS 4%

    myscada · myproApr 27, 2023

  • CVE-2024-45369
    36Monitor

    mySCADA myPRO Improper Authentication

    CriticalCVSS 9.2No exploitEPSS 0%

    myscada · mypro managerNov 22, 2024

  • CVE-2022-0999
    35Monitor

    mySCADA myPRO Command Injection

    HighCVSS 8.8No exploitEPSS 1%

    myscada · myproApr 11, 2022

  • CVE-2023-29169
    35Monitor

    mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system comman

    HighCVSS 8.8No exploitEPSS 0%

    myscada · myproApr 27, 2023

  • CVE-2023-29150
    35Monitor

    mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system comman

    HighCVSS 8.8No exploitEPSS 0%

    myscada · myproApr 27, 2023

  • CVE-2021-41578
    34Monitor

    mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files.

    HighCVSS 7.8No exploitEPSS 10%

    myscada · mydesignerOct 4, 2021