by Kastro
Paper/Archive/CVE-2021-43987

CVE-2021-43987

mySCADA myPRO — mySCADA myPRO

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 69.4.694 × 2013.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An additional, nondocumented administrative account exists in mySCADA myPRO Versions 8.20.0 and prior that is not exposed through the web interface, which cannot be deleted or changed through the regular web interface.

Affected

ProductAffectedFixed inSource
myPROAll – 8.20.0–CNA

Scores by source

icscert (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refcisa.gov/uscert/ics/advisories/icsa-21-355-01