CVE-2021-43985: mySCADA myPRO

Q: What is CVE-2021-43985?

CVE-2021-43985 is a vulnerability that allows an unauthenticated remote attacker to access mySCADA myPRO Versions 8.20.0 and prior without any form of authentication or authorization.

Q: What is the severity of CVE-2021-43985?

CVE-2021-43985 has a severity rating of critical with a score of 9.8.

Q: What software versions are affected by CVE-2021-43985?

mySCADA myPRO Versions 8.20.0 and prior are affected by CVE-2021-43985.

Q: How can an attacker exploit CVE-2021-43985?

An unauthenticated remote attacker can exploit CVE-2021-43985 by accessing mySCADA myPRO Versions 8.20.0 and prior without any form of authentication or authorization.

Q: Is there a fix available for CVE-2021-43985?

At the moment, there is no specific fix available for CVE-2021-43985. It is recommended to follow the guidance provided by the vendor or security advisory.

Published Dec 23, 2021

Updated

An unauthenticated remote attacker can access mySCADA myPRO Versions 8.20.0 and prior without any form of authentication or authorization.

Affected Software

2 affected components

mySCADA myPRO<=8.20.0

Remediation

Information

mySCADA recommends users upgrade to Version 8.22.0 or higher. For more information, contact mySCADA technical support.

Event History

Dec 23, 2021

CVE Published

via MITRE·07:48 PM

Data Sourced

via MITRE·07:48 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

ICSA-21-355-01

Frequently Asked Questions

What is CVE-2021-43985?

CVE-2021-43985 is a vulnerability that allows an unauthenticated remote attacker to access mySCADA myPRO Versions 8.20.0 and prior without any form of authentication or authorization.

What is the severity of CVE-2021-43985?

CVE-2021-43985 has a severity rating of critical with a score of 9.8.

What software versions are affected by CVE-2021-43985?