CVE-2021-43987
Assigner: icscert
Published: 2021-12-21T00:00:00
State: PUBLISHED
affected: product: myPRO
vendor: mySCADA
versions: lessThanOrEqual: 8.20.0
status: affected
version: All
versionType: custom
datePublic: 2021-12-21T00:00:00
descriptions: value: An additional, nondocumented administrative account exists in mySCADA myPRO Versions 8.20.0 and prior that is not exposed through the web interface, which cannot be deleted or changed through the regular web interface.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.8
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-912
description: CWE-912 Hidden Functionality 
type: CWE
solutions: value: mySCADA recommends users upgrade to Version 8.22.0 or higher. For more information, contact mySCADA technical support.
source: advisory: ICSA-21-355-01
discovery: UNKNOWN
title: mySCADA myPRO
x_generator: engine: Vulnogram 0.0.9