myPRO Runtime vulnerabilities
5 known vulnerabilities in myPRO Runtime from mySCADA. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
myPRO Manager: Improper Neutralization of Special Elements used in an OS Command
mySCADA myPRO does not properly neutralize POST requests sent to a specific port with email information. This vulnerability could be exploited by an attacker to execute arbitrary commands on the affected system.
- 9.8 Critical severity
myPRO Manager: Improper Neutralization of Special Elements used in an OS Command
mySCADA myPRO does not properly neutralize POST requests sent to a specific port with version information. This vulnerability could be exploited by an attacker to execute arbitrary commands on the affected system.
- 10.0 Critical severity
myPRO Manager: Improper Neutralization of Special Elements used in an OS Command
An OS Command Injection vulnerability exists within myPRO Manager. A parameter within a command can be exploited by an unauthenticated remote attacker to inject arbitrary operating system commands.
- 7.5 High severity
myPRO Manager: Path Traversal: '.../...//'
The back-end does not sufficiently verify the user-controlled filename parameter which makes it possible for an attacker to perform a path traversal attack and retrieve arbitrary files from the file system.
- 10.0 Critical severity
myPRO Manager: Improper Neutralization of Special Elements used in an OS Command
A parameter within a command does not properly validate input within myPRO Manager which could be exploited by an unauthenticated remote attacker to inject arbitrary operating system commands.