GCVE - cpe:2.3:a:myscada:mypro_runtime:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:myscada:mypro_runtime:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Myscada (`8c1c231a-6d54-500a-9a86-294a41e74776`)
Product	Mypro Runtime (`95eeeb6c-a33b-554f-90e7-4000759ecb12`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-20061`	vulnerable	2026-06-08 07:08:38.873669	mySCADA myPRO Manager OS Command Injection CRITICAL (9.8) mySCADA myPRO does not properly neutralize POST requests sent to a specific port with email information. This vulnerability could be exploited by an attacker to execute arbitrary commands on the affected system. Published: 2025-01-29T19:52:43.495Z Updated: 2025-02-12T19:51:13.559Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-25-023-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-20014`	vulnerable	2026-06-08 07:08:38.764607	mySCADA myPRO Manager OS Command Injection CRITICAL (9.8) mySCADA myPRO does not properly neutralize POST requests sent to a specific port with version information. This vulnerability could be exploited by an attacker to execute arbitrary commands on the affected system. Published: 2025-01-29T19:46:58.215Z Updated: 2025-01-29T19:57:36.743Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-25-023-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-52034`	vulnerable	2026-06-08 06:52:14.617132	mySCADA myPRO OS Command Injection CRITICAL (10) An OS Command Injection vulnerability exists within myPRO Manager. A parameter within a command can be exploited by an unauthenticated remote attacker to inject arbitrary operating system commands. Published: 2024-11-22T22:15:57.162Z Updated: 2024-11-25T19:02:53.753Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-50054`	vulnerable	2026-06-08 06:52:08.899497	mySCADA myPRO Path Traversal HIGH (7.5) The back-end does not sufficiently verify the user-controlled filename parameter which makes it possible for an attacker to perform a path traversal attack and retrieve arbitrary files from the file system. Published: 2024-11-22T22:22:08.207Z Updated: 2024-11-26T16:59:05.931Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-47407`	vulnerable	2026-06-08 06:48:11.963039	mySCADA myPRO OS Command Injection CRITICAL (10) A parameter within a command does not properly validate input within myPRO Manager which could be exploited by an unauthenticated remote attacker to inject arbitrary operating system commands. Published: 2024-11-22T22:15:03.490Z Updated: 2024-11-25T20:19:08.895Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-47138`	vulnerable	2026-06-08 06:48:11.492165	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45369`	vulnerable	2026-06-08 06:48:05.976309	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.