Myscada Mypro vulnerabilities
28 known vulnerabilities affecting myscada/mypro.
Total CVEs
28
CISA KEV
0
Public exploits
4
Exploited in wild
0
Severity breakdown
CRITICAL11HIGH14MEDIUM3
Vulnerabilities
Page 2 of 2
CVE-2021-33009P3HIGHCVSS 7.5fixed in 8.20.0≥ unspecified, < 8.20.02022-05-13
CVE-2021-33009 [HIGH] CWE-434 CVE-2021-33009: mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary
mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to the file system.
nvd
CVE-2021-43989P3HIGHCVSS 7.5≤ 8.20.0≥ All, ≤ 8.20.02021-12-23
CVE-2021-43989 [HIGH] CWE-916 CVE-2021-43989: mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to c
mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes.
nvd
CVE-2021-27505P3HIGHCVSS 7.5fixed in 8.20.0≥ unspecified, < 8.20.02022-05-13
CVE-2021-27505 [HIGH] CWE-548 CVE-2021-27505: mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive direc
mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive directory listing information.
nvd
CVE-2021-33013P3HIGHCVSS 7.5fixed in 8.20.0≥ unspecified, < 8.20.02022-05-13
CVE-2021-33013 [HIGH] CWE-284 CVE-2021-33013: mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive syste
mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive system information.
nvd
CVE-2017-12730P3HIGHCVSS 7.8≤ 7.0.262017-10-06
CVE-2017-12730 [HIGH] CWE-428 CVE-2017-12730: An Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior. Application
An Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior. Application services utilize unquoted search path elements, which could allow an attacker to execute arbitrary code with elevated privileges.
nvd
CVE-2018-11517P3MEDIUMCVSS 5.3v7.02018-05-28
CVE-2018-11517 [MEDIUM] CWE-200 CVE-2018-11517: mySCADA myPRO 7 allows remote attackers to discover all ProjectIDs in a project by sending all of th
mySCADA myPRO 7 allows remote attackers to discover all ProjectIDs in a project by sending all of the prj parameter values from 870000 to 875000 in t=0&rq=0 requests to TCP port 11010.
nvd
CVE-2025-23411P4MEDIUMCVSS 6.5fixed in 1.42025-02-13
CVE-2025-23411 [MEDIUM] CWE-352 CVE-2025-23411: mySCADA myPRO Manager is vulnerable to cross-site request forgery (CSRF), which could allow an att
mySCADA myPRO Manager
is vulnerable to cross-site request forgery (CSRF), which could allow
an attacker to obtain sensitive information. An attacker would need to
trick the victim in to visiting an attacker-controlled website.
nvd
CVE-2025-35941MEDIUMCVSS 5.5≥ 1.3, ≤ 1.42025-06-11
CVE-2025-35941 [MEDIUM] mySCADA PRO Manager Password Disclosure
mySCADA PRO Manager Password Disclosure
A password is exposed locally.
cvelistv5
← Previous2 / 2