Myscada Technologies Myscada Mypro vulnerabilities
8 known vulnerabilities affecting myscada_technologies/myscada_mypro.
Total CVEs
8
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH6MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2023-28384P2HIGHCVSS 8.8PoC≤ 8.26.02023-04-27
CVE-2023-28384 [HIGH] CWE-78 CVE-2023-28384: mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to
mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands.
nvd
CVE-2026-73807P2CRITICALCVSS 9.8≤ 2.12026-09-15
CVE-2026-73807 [CRITICAL] CWE-862 CVE-2026-73807: The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functi
The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions.
nvd
CVE-2022-2234P2HIGHCVSS 8.8≥ unspecified, ≤ 8.26.02022-08-24
CVE-2022-2234 [HIGH] CWE-77 CVE-2022-2234: An authenticated mySCADA myPRO 8.26.0 user may be able to modify parameters to run commands directly
An authenticated mySCADA myPRO 8.26.0 user may be able to modify parameters to run commands directly in the operating system.
nvd
CVE-2023-28400P2HIGHCVSS 8.8≤ 8.26.02023-04-27
CVE-2023-28400 [HIGH] CWE-78 CVE-2023-28400: mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to
mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands.
nvd
CVE-2023-28716P3HIGHCVSS 8.8≤ 8.26.02023-04-27
CVE-2023-28716 [HIGH] CWE-78 CVE-2023-28716: mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to
mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands.
nvd
CVE-2023-29150P3HIGHCVSS 8.8≤ 8.26.02023-04-27
CVE-2023-29150 [HIGH] CWE-78 CVE-2023-29150: mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to
mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands.
nvd
CVE-2023-29169P3HIGHCVSS 8.8≤ 8.26.02023-04-27
CVE-2023-29169 [HIGH] CWE-78 CVE-2023-29169: mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to
mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands.
nvd
CVE-2026-82567P3MEDIUMCVSS 6.3≤ 2.12026-09-15
CVE-2026-82567 [MEDIUM] CWE-862 CVE-2026-82567: The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS mes
The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is accessible over the network and does not require authentication before accepting a phone number and message from a request and sending the specified SMS message. An unauthenticated attacker with net
nvd