mySCADA myPRO Path Traversal
CVE-2024-50054

7.5HIGH

Key Information:

Vendor

Myscada

Status
Mypro Manager
Mypro Runtime
Vendor
CVE Published:
22 November 2024

What is CVE-2024-50054?

A vulnerability exists in XYZ Software from ExampleCorp due to inadequate validation of user-controlled filename parameters. This flaw can be exploited by an attacker to launch a path traversal attack, gaining unauthorized access to sensitive files on the system. By manipulating the input, the attacker may retrieve arbitrary files from the file system, potentially compromising confidentiality and integrity. Organizations using affected versions of XYZ Software should implement security best practices and monitor for suspicious activities to mitigate the risk associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

myPRO Manager 0 < 1.3

myPRO Runtime 0 < 9.2.1

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-3...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

Credit

Michael Heinzl reported these vulnerabilities to CISA.
JSON
.