ID
VAR-202411-1373
CVE
CVE-2024-50054
TITLE
mySCADA myPRO Manager Directory Traversal Vulnerability
Trust: 0.6
DESCRIPTION
The back-end does not sufficiently verify the user-controlled filename parameter which makes it possible for an attacker to perform a path traversal attack and retrieve arbitrary files from the file system. mySCADA myPRO is a professional HMI/SCADA system designed primarily for visualization and control of industrial processes. mySCADA myPRO Manager has a directory traversal vulnerability that an attacker can exploit to submit special requests to view system file contents in the context of the application and obtain sensitive information
Trust: 1.44
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | myscada | model: | mypro manager | scope: | lt | version: | 1.3 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-35 | Trust: 1.0 |
PATCH
| title: | Patch for mySCADA myPRO Manager Directory Traversal Vulnerability | url: | https://www.cnvd.org.cn/patchInfo/show/634341 | Trust: 0.6 |
EXTERNAL IDS
| db: | ICS CERT | id: | ICSA-24-326-07 | Trust: 1.6 |
| db: | NVD | id: | CVE-2024-50054 | Trust: 1.6 |
| db: | CNVD | id: | CNVD-2024-46405 | Trust: 0.6 |
REFERENCES
| url: | https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07 | Trust: 1.6 |
SOURCES
| db: | CNVD | id: | CNVD-2024-46405 |
| db: | NVD | id: | CVE-2024-50054 |
LAST UPDATE DATE
2024-11-29T22:48:08.429000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2024-46405 | date: | 2024-11-28T00:00:00 |
| db: | NVD | id: | CVE-2024-50054 | date: | 2024-11-22T23:15:05.510 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2024-46405 | date: | 2024-11-28T00:00:00 |
| db: | NVD | id: | CVE-2024-50054 | date: | 2024-11-22T23:15:05.510 |