CVE-2021-43555
mySCADA myDESIGNER
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
mySCADA myDESIGNER Versions 8.20.0 and prior fails to properly validate contents of an imported project file, which may make the product vulnerable to a path traversal payload. This vulnerability may allow an attacker to plant files on the file system in arbitrary locations or overwrite existing files, resulting in remote code execution.
mySCADA myDESIGNER versiones 8.20.0 y anteriores, no comprueban correctamente el contenido de un archivo de proyecto importado, lo que puede hacer que el producto sea vulnerable a una carga útil de salto de ruta. Esta vulnerabilidad puede permitir a un atacante plantar archivos en el sistema de archivos en ubicaciones arbitrarias o sobrescribir archivos existentes, resultando en una ejecución de código remota
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-11-08 CVE Reserved
- 2021-11-19 CVE Published
- 2024-09-17 CVE Updated
- 2024-10-25 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CWE-23: Relative Path Traversal
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://us-cert.cisa.gov/ics/advisories/icsa-21-313-04 | 2022-07-25 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Myscada Search vendor "Myscada" | Mydesigner Search vendor "Myscada" for product "Mydesigner" | <= 8.20.0 Search vendor "Myscada" for product "Mydesigner" and version " <= 8.20.0" | - |
Affected
|