mySCADA kayıtları
myscada üreticisine ait 34 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 4 · %11,8
- Pre-auth RCE
- 8
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')13
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-306 Missing Authentication for Critical Function2
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')2
- CWE-287 Improper Authentication1
- CWE-288 Authentication Bypass Using an Alternate Path or Channel1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
34 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
59Planlayın | CVE-2024-47407Silahlaştırılmış | mySCADA myPRO OS Command Injectionmyscada · mypro manager · CWE-78 | Kritik10,0 | — | %64,0 | 22 Kas 2024 |
48Planlayın | CVE-2023-28384Silahlaştırılmış | mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commanmyscada · mypro · CWE-78 | Yüksek8,8 | — | %44,8 | 27 Nis 2023 |
48Planlayın | CVE-2022-2234İstismar yok | mySCADA myPRO Command Injectionmyscada · mypro · CWE-77 | Yüksek8,8 | — | %42,3 | 24 Ağu 2022 |
42Planlayın | CVE-2021-43555İstismar yok | mySCADA myDESIGNER Versions 8.20.0 and prior fails to properly validate contents of an imported project file, which may make the product vulmyscada · mydesigner · CWE-23 | Yüksek7,8 | — | %38,2 | 19 Kas 2021 |
42Planlayın | CVE-2023-28400İstismar yok | mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commanmyscada · mypro · CWE-78 | Yüksek8,8 | — | %24,6 | 27 Nis 2023 |
42Planlayın | CVE-2025-24865Silahlaştırılmış | mySCADA myPRO Manager Missing Authentication for Critical Functionmyscada · mypro · CWE-306 | Kritik10,0 | — | %7,2 | 13 Şub 2025 |
41Planlayın | CVE-2018-11311Kavram kanıtı | A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attackers to access the FTmyscada · mypro · CWE-798 | Kritik9,1 | — | %15,2 | 20 May 2018 |
41Planlayın | CVE-2024-52034İstismar yok | mySCADA myPRO OS Command Injectionmyscada · mypro manager · CWE-78 | Kritik10,0 | — | %1,7 | 22 Kas 2024 |
39İzleyin | CVE-2021-43985İstismar yok | An unauthenticated remote attacker can access mySCADA myPRO Versions 8.20.0 and prior without any form of authentication or authorization.myscada · mypro · CWE-288 | Kritik9,8 | — | %1,5 | 23 Ara 2021 |
39İzleyin | CVE-2021-44453İstismar yok | mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to injemyscada · mypro · CWE-78 | Kritik9,8 | — | %1,4 | 23 Ara 2021 |
39İzleyin | CVE-2021-22657İstismar yok | mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitrmyscada · mypro · CWE-78 | Kritik9,8 | — | %1,2 | 23 Ara 2021 |
39İzleyin | CVE-2021-43981İstismar yok | mySCADA myPRO: Versions 8.20.0 and prior has a feature to send emails, which may allow an attacker to inject arbitrary operating system commmyscada · mypro · CWE-78 | Kritik9,8 | — | %1,2 | 23 Ara 2021 |
39İzleyin | CVE-2021-43984İstismar yok | mySCADA myPRO: Versions 8.20.0 and prior has a feature where the firmware can be updated, which may allow an attacker to inject arbitrary opmyscada · mypro · CWE-78 | Kritik9,8 | — | %1,2 | 23 Ara 2021 |
39İzleyin | CVE-2021-23198İstismar yok | mySCADA myPRO: Versions 8.20.0 and prior has a feature where the password can be specified, which may allow an attacker to inject arbitrary myscada · mypro · CWE-78 | Kritik9,8 | — | %1,2 | 23 Ara 2021 |
39İzleyin | CVE-2021-43987İstismar yok | An additional, nondocumented administrative account exists in mySCADA myPRO Versions 8.20.0 and prior that is not exposed through the web inmyscada · mypro · CWE-912 | Kritik9,8 | — | %1,2 | 23 Ara 2021 |
37İzleyin | CVE-2025-22896Silahlaştırılmış | mySCADA myPRO Manager Cleartext Storage of Sensitive Informationmyscada · mypro · CWE-312 | Kritik9,2 | — | %3,6 | 13 Şub 2025 |
37İzleyin | CVE-2025-25067İstismar yok | mySCADA myPRO Manager OS Command Injectionmyscada · mypro · CWE-78 | Kritik9,3 | — | %1,7 | 13 Şub 2025 |
37İzleyin | CVE-2024-4708İstismar yok | mySCADA myPRO Use of Hard-coded Passwordmyscada · mypro · CWE-259 | Kritik9,3 | — | %1,0 | 2 Tem 2024 |
37İzleyin | CVE-2024-47138İstismar yok | mySCADA myPRO Missing Authentication for Critical Functionmyscada · mypro manager · CWE-306 | Kritik9,3 | — | %0,8 | 22 Kas 2024 |
36İzleyin | CVE-2023-28716İstismar yok | mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commanmyscada · mypro · CWE-78 | Yüksek8,8 | — | %4,5 | 27 Nis 2023 |
36İzleyin | CVE-2024-45369İstismar yok | mySCADA myPRO Improper Authenticationmyscada · mypro manager · CWE-287 | Kritik9,2 | — | %0,6 | 22 Kas 2024 |
35İzleyin | CVE-2022-0999İstismar yok | mySCADA myPRO Command Injectionmyscada · mypro · CWE-77 | Yüksek8,8 | — | %1,4 | 11 Nis 2022 |
35İzleyin | CVE-2023-29169İstismar yok | mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commanmyscada · mypro · CWE-78 | Yüksek8,8 | — | %0,7 | 27 Nis 2023 |
35İzleyin | CVE-2023-29150İstismar yok | mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commanmyscada · mypro · CWE-78 | Yüksek8,8 | — | %0,7 | 27 Nis 2023 |
34İzleyin | CVE-2021-41578İstismar yok | mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files.myscada · mydesigner · CWE-22 | Yüksek7,8 | — | %10,8 | 4 Eki 2021 |
- CVE-2024-4740759Planlayın
mySCADA myPRO OS Command Injection
KritikCVSS 10,0SilahlaştırılmışEPSS %64myscada · mypro manager22 Kas 2024
- CVE-2023-2838448Planlayın
mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system comman
YüksekCVSS 8,8SilahlaştırılmışEPSS %45myscada · mypro27 Nis 2023
- CVE-2022-223448Planlayın
mySCADA myPRO Command Injection
YüksekCVSS 8,8İstismar yokEPSS %42myscada · mypro24 Ağu 2022
- CVE-2021-4355542Planlayın
mySCADA myDESIGNER Versions 8.20.0 and prior fails to properly validate contents of an imported project file, which may make the product vul
YüksekCVSS 7,8İstismar yokEPSS %38myscada · mydesigner19 Kas 2021
- CVE-2023-2840042Planlayın
mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system comman
YüksekCVSS 8,8İstismar yokEPSS %25myscada · mypro27 Nis 2023
- CVE-2025-2486542Planlayın
mySCADA myPRO Manager Missing Authentication for Critical Function
KritikCVSS 10,0SilahlaştırılmışEPSS %7myscada · mypro13 Şub 2025
- CVE-2018-1131141Planlayın
A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attackers to access the FT
KritikCVSS 9,1Kavram kanıtıEPSS %15myscada · mypro20 May 2018
- CVE-2024-5203441Planlayın
mySCADA myPRO OS Command Injection
KritikCVSS 10,0İstismar yokEPSS %2myscada · mypro manager22 Kas 2024
- CVE-2021-4398539İzleyin
An unauthenticated remote attacker can access mySCADA myPRO Versions 8.20.0 and prior without any form of authentication or authorization.
KritikCVSS 9,8İstismar yokEPSS %2myscada · mypro23 Ara 2021
- CVE-2021-4445339İzleyin
mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inje
KritikCVSS 9,8İstismar yokEPSS %1myscada · mypro23 Ara 2021
- CVE-2021-2265739İzleyin
mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitr
KritikCVSS 9,8İstismar yokEPSS %1myscada · mypro23 Ara 2021
- CVE-2021-4398139İzleyin
mySCADA myPRO: Versions 8.20.0 and prior has a feature to send emails, which may allow an attacker to inject arbitrary operating system comm
KritikCVSS 9,8İstismar yokEPSS %1myscada · mypro23 Ara 2021
- CVE-2021-4398439İzleyin
mySCADA myPRO: Versions 8.20.0 and prior has a feature where the firmware can be updated, which may allow an attacker to inject arbitrary op
KritikCVSS 9,8İstismar yokEPSS %1myscada · mypro23 Ara 2021
- CVE-2021-2319839İzleyin
mySCADA myPRO: Versions 8.20.0 and prior has a feature where the password can be specified, which may allow an attacker to inject arbitrary
KritikCVSS 9,8İstismar yokEPSS %1myscada · mypro23 Ara 2021
- CVE-2021-4398739İzleyin
An additional, nondocumented administrative account exists in mySCADA myPRO Versions 8.20.0 and prior that is not exposed through the web in
KritikCVSS 9,8İstismar yokEPSS %1myscada · mypro23 Ara 2021
- CVE-2025-2289637İzleyin
mySCADA myPRO Manager Cleartext Storage of Sensitive Information
KritikCVSS 9,2SilahlaştırılmışEPSS %4myscada · mypro13 Şub 2025
- CVE-2025-2506737İzleyin
mySCADA myPRO Manager OS Command Injection
KritikCVSS 9,3İstismar yokEPSS %2myscada · mypro13 Şub 2025
- CVE-2024-470837İzleyin
mySCADA myPRO Use of Hard-coded Password
KritikCVSS 9,3İstismar yokEPSS %1myscada · mypro2 Tem 2024
- CVE-2024-4713837İzleyin
mySCADA myPRO Missing Authentication for Critical Function
KritikCVSS 9,3İstismar yokEPSS %1myscada · mypro manager22 Kas 2024
- CVE-2023-2871636İzleyin
mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system comman
YüksekCVSS 8,8İstismar yokEPSS %5myscada · mypro27 Nis 2023
- CVE-2024-4536936İzleyin
mySCADA myPRO Improper Authentication
KritikCVSS 9,2İstismar yokEPSS %1myscada · mypro manager22 Kas 2024
- CVE-2022-099935İzleyin
mySCADA myPRO Command Injection
YüksekCVSS 8,8İstismar yokEPSS %1myscada · mypro11 Nis 2022
- CVE-2023-2916935İzleyin
mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system comman
YüksekCVSS 8,8İstismar yokEPSS %1myscada · mypro27 Nis 2023
- CVE-2023-2915035İzleyin
mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system comman
YüksekCVSS 8,8İstismar yokEPSS %1myscada · mypro27 Nis 2023
- CVE-2021-4157834İzleyin
mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files.
YüksekCVSS 7,8İstismar yokEPSS %11myscada · mydesigner4 Eki 2021