CVE-2024-4708

published 2024-07-02

CVE-2024-4708: mySCADA myPRO uses a hard-coded password which could allow an attacker to remotely execute code on the affected device.

Priority P2 64 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

mySCADA myPRO

uses a hard-coded password which could allow an attacker to remotely execute code on the affected device.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
myscada	mypro	< 8.31.0	8.31.0

Detection & IOCs extracted from sources · hover to see the quote

• → The vulnerability involves a hard-coded password in mySCADA myPRO versions prior to 8.31.0, enabling unauthenticated remote code execution. Detect exploitation attempts by monitoring for unexpected remote connections or command execution on myPRO instances, particularly from unauthenticated sources. ↗
• → Identify unpatched mySCADA myPRO deployments by checking for versions prior to 8.31.0 exposed on the network, especially those accessible from the internet. ↗

• · No specific hard-coded password value, exploit payload, network port, or file-system artifact was disclosed in the available sources. The advisory confirms the vulnerability class (CWE-259) but provides no actionable credential or byte-level indicator. ↗
• · No known public exploitation has been reported at time of advisory publication, limiting the availability of observed attack-pattern IOCs. ↗

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v4.0 9.3 CRITICAL CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-259 CWE-798