CVE-2024-47407: mySCADA myPRO OS Command Injection

Published Nov 22, 2024

Updated

A parameter within a command does not properly validate input within myPRO Manager which could be exploited by an unauthenticated remote attacker to inject arbitrary operating system commands.

Affected Software

1 affected component

mySCADA myPRO

Remediation

Information

mySCADA recommends updating to the latest versions: * mySCADA PRO Manager 1.3 https://www.myscada.org/resources/ * mySCADA PRO Runtime 9.2.1 https://www.myscada.org/resources/

Event History

Nov 22, 2024

CVE Published

via MITRE·10:15 PM

Data Sourced

via MITRE·10:15 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·11:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-47407?

CVE-2024-47407 is rated as a critical vulnerability due to its potential to allow unauthenticated remote attackers to execute arbitrary operating system commands.

How do I fix CVE-2024-47407?

To fix CVE-2024-47407, update your myPRO Manager software to the latest version that addresses this vulnerability.

Who is impacted by CVE-2024-47407?

Any users of mySCADA myPRO Manager software may be impacted by CVE-2024-47407 if they have not applied the necessary security updates.

What type of attack can exploit CVE-2024-47407?

CVE-2024-47407 can be exploited through remote command injection attacks, allowing attackers to issue arbitrary commands on the affected system.

Is authentication required to exploit CVE-2024-47407?

No, exploitation of CVE-2024-47407 does not require authentication, making it more dangerous to exposed systems.