CVE-2021-33005

mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to arbitrary directories.

Score

CVSS 3.1 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2022-05-13

Last modified

2025-04-16

Weaknesses

CWE-22

Affected products

• Mypro (Myscada)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-21-217-03
• https://www.myscada.org/version-8-20-0-released-security-update