Severity
High
Analysis Summary
CVE-2022-0999
mySCADA myPRO could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by a command injection vulnerability. By misusing parameters, an attacker could exploit this vulnerability to execute arbitrary commands on the system.
Impact
- Command Execution
Indicators Of Compromise
CVE
- CVE-2022-0999
Affected Vendors
- mySCADA
Affected Products
- mySCADA myPRO 7.0.26
- mySCADA myPRO 8.19.0
- mySCADA myPRO 8.18.0
- mySCADA myPRO 8.17.0
Remediation
Upgrade to the latest version of mySCADA myPRO, available from the mySCADA Web site.