CVE-2021-44453
CRITICAL WAF: High
CVSS 9.8
Published: 2021-12-23
CWE-78
mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inject arbitrary operating system commands.
WAF Coverage Analysis
OS Command Injection
High WAF Coverage
OWASP: A03:2021 Injection
932xxx - Remote Code Execution
Affected Software
| Vendor | Product | Version |
|---|---|---|
| myscada | mypro | up to 8.20.0 |
References
- www.cisa.gov (Third Party Advisory, US Government Resource)