CVE-2022-2234: mySCADA myPRO Command Injection
Published Aug 24, 2022
·Updated
An authenticated mySCADA myPRO 8.26.0 user may be able to modify parameters to run commands directly in the operating system.
Affected Software
2 affected components
mySCADA myPRO<=8.26.0
mySCADA Technologies myPRO<=8.26.0
Remediation
Patch Available
Information
mySCADA recommends users upgrade to version 8.27.0 or higher. For more information, contact mySCADA technical support. mySCADA will also send security advice by email to all registered users.
Event History
Aug 24, 2022
CVE Published
via MITRE·03:15 PM
Data Sourced
via MITRE·03:15 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-2234?
CVE-2022-2234 has a high severity rating due to its potential for exploitation by authenticated users to execute arbitrary commands.
2
How do I fix CVE-2022-2234?
To remediate CVE-2022-2234, upgrade mySCADA myPRO to a version after 8.26.0 where this vulnerability has been addressed.
3
Who is affected by CVE-2022-2234?
CVE-2022-2234 affects users of mySCADA myPRO version 8.26.0 and earlier.
4
What type of vulnerability is CVE-2022-2234?
CVE-2022-2234 is an authentication-related vulnerability that allows unauthorized command execution.
5
Can CVE-2022-2234 be exploited remotely?
CVE-2022-2234 requires authenticated access, so it cannot be exploited remotely without valid user credentials.