CVE-2025-20061 — mySCADA myPRO Manager OS Command Injection

CVE-2025-20061

mySCADA myPRO Manager OS Command Injection PUBLISHED

Description (CNA)

mySCADA myPRO does not properly neutralize POST requests sent to a specific port with email information. This vulnerability could be exploited by an attacker to execute arbitrary commands on the affected system.

Affected (CNA)

Vendor / product	Versions
mySCADA / myPRO Manager	affected 0 before 1.3
mySCADA / myPRO Runtime	affected 0 before 9.2.1

CWE

CWE-78

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-023-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.