CVE-2021-43987
mySCADA myPRO
- State
- Published
- Severity
- 9.8 Critical
- Published
- Dec 23, 2021
- Updated
- Sep 16, 2024
- Reserved
- Nov 17, 2021
Description
An additional, nondocumented administrative account exists in mySCADA myPRO Versions 8.20.0 and prior that is not exposed through the web interface, which cannot be deleted or changed through the regular web interface.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | icscert |
Weaknesses
- CWE-912 Hidden Functionality
Affected Products
| Product | Versions |
|---|---|
myPROmySCADA |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.