Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: mySCADA myPRO Manager 1.4 Clear all filters
TI-2025-18736 CVE-2025-25067 · GHSA-r3fr-hgwv-7g68

mySCADA myPRO Manager OS Command Injection

Priority MEDIUM 51

mySCADA myPRO Manager is vulnerable to an OS command injection which could allow a remote attacker to execute arbitrary OS commands.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01659 Published 2025-02-13 Fixed in 1.4 CWE-78
TI-2025-17178 CVE-2025-23411 · GHSA-p8wr-gh54-63h2

mySCADA myPRO Manager Cross-Site Request Forgery

Priority LOW 24

mySCADA myPRO Manager is vulnerable to cross-site request forgery (CSRF), which could allow an attacker to obtain sensitive information.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00595 Published 2025-02-13 Fixed in 1.4 CWE-352
TI-2025-18574 CVE-2025-24865 · GHSA-5vm2-873v-mw7w

mySCADA myPRO Manager Missing Authentication for Critical Function

Priority MEDIUM 59

The administrative web interface of mySCADA myPRO Manager can be accessed without authentication which could allow an unauthorized attacker to retrieve sensitive information and upload files without the associated passwo…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.07245 Published 2025-02-13 Fixed in 1.4 CWE-306