CVE-2025-24865

概要

参考情報

• cisa.gov/news-events/ics-advisories/icsa-25-044-16 · Third Party Advisory
• myscada.org/contacts · Product
• myscada.org/downloads/mySCADAPROManager · Product

mypro のその他の脆弱性

• CVE-2025-25067緊急 9.8mySCADA myPRO Manager is vulnerable to an OS command injection which could allow a remote attacker to execute arbitrary OS commands.
• CVE-2025-23411中 6.5mySCADA myPRO Manager is vulnerable to cross-site request forgery (CSRF), which could allow an attacker to obtain sensitive information. A…
• CVE-2025-22896高 7.5mySCADA myPRO Manager stores credentials in cleartext, which could allow an attacker to obtain sensitive information.
• CVE-2024-4708緊急 9.8mySCADA myPRO uses a hard-coded password which could allow an attacker to remotely execute code on the affected device.
• CVE-2023-29169高 8.8mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system comman…