An unauthenticated remote attacker can access mySCADA myPRO Versions 8.20.0 and prior without any form of authentication or authorization.
Solution:
The product requires authentication, but the product has an alternate path or channel that does not require authentication.
Link | Tags |
---|---|
https://www.cisa.gov/uscert/ics/advisories/icsa-21-355-01 | third party advisory us government resource |