CVE-2025-24865: mySCADA myPRO Manager Missing Authentication for Critical Function
First published: Thu Feb 13 2025(Updated: )
The administrative web interface of mySCADA myPRO Manager can be accessed without authentication which could allow an unauthorized attacker to retrieve sensitive information and upload files without the associated password.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| mySCADA myPRO Manager | <1.4 | 1.4 |
Remedy
mySCADA recommends users update to myPRO Manager v1.4 https://www.myscada.org/downloads/mySCADAPROManager/
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-24865?
CVE-2025-24865 is considered a significant security vulnerability due to the ability for unauthorized access to sensitive information.
How do I fix CVE-2025-24865?
To fix CVE-2025-24865, ensure that authentication is enabled for the administrative web interface of mySCADA myPRO Manager.
What versions of mySCADA myPRO Manager are affected by CVE-2025-24865?
CVE-2025-24865 affects all versions of mySCADA myPRO Manager prior to 1.4.
What could an attacker do if they exploit CVE-2025-24865?
An attacker could retrieve sensitive information and potentially upload files without authentication if they exploit CVE-2025-24865.
How can I secure mySCADA myPRO Manager against CVE-2025-24865?
Securing mySCADA myPRO Manager against CVE-2025-24865 involves configuring proper access controls and ensuring that the administrative interface requires authentication.
- collector/nvd-api
- source/NVD
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/type
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/title
- agent/severity
- agent/remedy
- agent/source
- agent/first-publish-date
- agent/tags
- agent/event
- vendor/: myscada
- canonical/myscada mypro manager