CVE-2023-29169 CVE-2023-29169

2023-04-2722:03:30

icscert

www.cve.org

vulnerability

myscada

mypro

os command injection

cve-2023-29169

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

31.6%

JSON

mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands.

CNA Affected

[
  {
    "vendor": "mySCADA Technologies",
    "product": "mySCADA myPRO",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "8.26.0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.cisa.gov/news-events/ics-advisories/icsa-23-096-06