CVE-2021-27505

Description

References

• cisa.gov/uscert/ics/advisories/icsa-21-217-03 · Third Party Advisory
• myscada.org/version-8-20-0-released-security-update · Release Notes

More vulnerabilities in mypro

• CVE-2025-25067CRITICAL 9.8mySCADA myPRO Manager is vulnerable to an OS command injection which could allow a remote attacker to execute arbitrary OS commands.
• CVE-2025-24865CRITICAL 9.8The administrative web interface of mySCADA myPRO Manager can be accessed without authentication which could allow an unauthorized attack…
• CVE-2025-23411MEDIUM 6.5mySCADA myPRO Manager is vulnerable to cross-site request forgery (CSRF), which could allow an attacker to obtain sensitive information. A…
• CVE-2025-22896HIGH 7.5mySCADA myPRO Manager stores credentials in cleartext, which could allow an attacker to obtain sensitive information.
• CVE-2024-4708CRITICAL 9.8mySCADA myPRO uses a hard-coded password which could allow an attacker to remotely execute code on the affected device.