Known vulnerabilities in myPRO

Vendor: mySCADA
Software: myPRO
Software CPE: cpe:2.3:a:myscada:mypro:*:*:*:*:*:*:*:*
Website: https://www.myscada.org/en/
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting myPRO myPRO is affected by 10 known vulnerabilities: 3 high, 5 medium, 2 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93704 - Use of Hard-coded Password
CVE-2024-4708		 CWE-259 High
No
No
 8.31.0 03.07.2024 SB2024070303
#VU66735 - Command injection
CVE-2022-2234		 CWE-77 Medium
No
No
 8.27.0 24.08.2022 SB2022082405
#VU61612 - Command injection
CVE-2022-0999		 CWE-77 Medium
No
No
 8.26.0 25.03.2022 SB2022032501
#VU55632 - Exposure of sensitive information to an unauthorized actor
CVE-2021-27505		 CWE-200 Medium
No
No
 8.20.0 06.08.2021 SB2021080605
#VU55631 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-33005		 CWE-22 Medium
No
No
 8.20.0 06.08.2021 SB2021080605
#VU55630 - Unrestricted Upload of File with Dangerous Type
CVE-2021-33009		 CWE-434 High
No
No
 8.20.0 06.08.2021 SB2021080605
#VU55629 - Improper Access Control
CVE-2021-33013		 CWE-284 High
No
No
 8.20.0 06.08.2021 SB2021080605
#VU13105 - Use of Hard-coded Credentials
CVE-2018-11311		 CWE-798 Low
Available
No
 - 31.05.2018 SB2018053108
#VU37106 - Exposure of sensitive information to an unauthorized actor
CVE-2018-11517		 CWE-200 Medium
No
No
 - 28.05.2018 SB2018052816
#VU8328 - Unquoted Search Path or Element
CVE-2017-12730		 CWE-428 Low
No
No
 - 13.09.2017 SB2017091301