CVE-2021-43987criticalCWE-912

CVE-2021-43987: critical vulnerability in mySCADA myPRO

mySCADA myPRO

Published · Updated

Follow this CVE+ Monitor myPRO

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 1.3%
An additional, nondocumented administrative account exists in mySCADA myPRO Versions 8.20.0 and prior that is not exposed through the web interface, which cannot be deleted or changed through the regular web interface.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
mySCADA · myPRO
Related CVEs — mySCADA myPRO

In the same product, most dangerous first.

CVE-2021-43985CRITICALmySCADA myPROEPSS 1.6%CVE-2021-33005HIGHmySCADA myPRO Path TraversalEPSS 1.6%CVE-2021-44453CRITICALmySCADA myPROEPSS 1.5%CVE-2022-0999HIGHmySCADA myPRO Command InjectionEPSS 1.4%CVE-2021-43981CRITICALmySCADA myPROEPSS 1.3%CVE-2021-43984CRITICALmySCADA myPROEPSS 1.3%