CVE-2024-45369

The web application uses a weak authentication mechanism to verify that a request is coming from an authenticated and authorized resource.

Score

CVSS 4.0 9.2 Critical

Status

Deferred - ics-cert@hq.dhs.gov

Published

2024-11-22

Last modified

2024-11-26

Weaknesses

CWE-287

Affected products

• Mypro Manager (Myscada)
• Mypro Runtime (Myscada)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07