CVE-2024-47407 — mySCADA myPRO OS Command Injection

CVE-2024-47407

mySCADA myPRO OS Command Injection PUBLISHED

Description (CNA)

A parameter within a command does not properly validate input within myPRO Manager which could be exploited by an unauthenticated remote attacker to inject arbitrary operating system commands.

Affected (CNA)

Vendor / product	Versions
mySCADA / myPRO Manager	affected 0 before 1.3
mySCADA / myPRO Runtime	affected 0 before 9.2.1

CWE

CWE-78

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.