Approved changes feed: RSS · Atom

cpe:2.3:a:myscada:mypro_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMyscada (8c1c231a-6d54-500a-9a86-294a41e74776)
ProductMypro Manager (aefa6488-8308-5b93-b41f-015c5f5b07c3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-25067 vulnerable 2026-06-08 07:12:50.649284 mySCADA myPRO Manager OS Command Injection
CRITICAL (9.8)
mySCADA myPRO Manager is vulnerable to an OS command injection which could allow a remote attacker to execute arbitrary OS commands.
Published: 2025-02-13T21:35:45.844Z
Updated: 2025-02-14T15:47:02.910Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24865 vulnerable 2026-06-08 07:12:50.109191 mySCADA myPRO Manager Missing Authentication for Critical Function
CRITICAL (10)
The administrative web interface of mySCADA myPRO Manager can be accessed without authentication which could allow an unauthorized attacker to retrieve sensitive information and upload files without the associated password.
Published: 2025-02-13T21:29:23.438Z
Updated: 2025-02-14T15:47:26.772Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23411 vulnerable 2026-06-08 07:10:55.717066 mySCADA myPRO Manager Cross-Site Request Forgery
MEDIUM (6.3)
mySCADA myPRO Manager is vulnerable to cross-site request forgery (CSRF), which could allow an attacker to obtain sensitive information. An attacker would need to trick the victim in to visiting an attacker-controlled website.
Published: 2025-02-13T21:33:26.498Z
Updated: 2025-02-14T15:47:10.881Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22896 vulnerable 2026-06-08 07:10:54.972371 mySCADA myPRO Manager Cleartext Storage of Sensitive Information
HIGH (8.6)
mySCADA myPRO Manager stores credentials in cleartext, which could allow an attacker to obtain sensitive information.
Published: 2025-02-13T21:31:37.888Z
Updated: 2025-02-14T15:47:18.133Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20061 vulnerable 2026-06-08 07:08:38.873628 mySCADA myPRO Manager OS Command Injection
CRITICAL (9.8)
mySCADA myPRO does not properly neutralize POST requests sent to a specific port with email information. This vulnerability could be exploited by an attacker to execute arbitrary commands on the affected system.
Published: 2025-01-29T19:52:43.495Z
Updated: 2025-02-12T19:51:13.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20014 vulnerable 2026-06-08 07:08:38.763513 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52034 vulnerable 2026-06-08 06:52:14.617091 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50054 vulnerable 2026-06-08 06:52:08.898698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47407 vulnerable 2026-06-08 06:48:11.962989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47138 vulnerable 2026-06-08 06:48:11.492125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45369 vulnerable 2026-06-08 06:48:05.975735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.