CVE-2024-50054 — mySCADA myPRO Path Traversal

CVE-2024-50054

mySCADA myPRO Path Traversal PUBLISHED

Description (CNA)

The back-end does not sufficiently verify the user-controlled filename parameter which makes it possible for an attacker to perform a path traversal attack and retrieve arbitrary files from the file system.

Affected (CNA)

Vendor / product	Versions
mySCADA / myPRO Manager	affected 0 before 1.3
mySCADA / myPRO Runtime	affected 0 before 9.2.1

CWE

CWE-35

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.