mySCADA myDESIGNER Versions 8.20.0 and prior fails to properly validate contents of an imported project file, which may make the product vulnerable to a path traversal payload. This vulnerability may allow an attacker to plant files on the file system in arbitrary locations or overwrite existing files, resulting in remote code execution.
References
| Link | Resource |
|---|---|
| https://us-cert.cisa.gov/ics/advisories/icsa-21-313-04 | Patch Third Party Advisory US Government Resource |
| https://us-cert.cisa.gov/ics/advisories/icsa-21-313-04 | Patch Third Party Advisory US Government Resource |
Configurations
History
21 Nov 2024, 06:29
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://us-cert.cisa.gov/ics/advisories/icsa-21-313-04 - Patch, Third Party Advisory, US Government Resource | |
| CVSS |
v2 : v3 : |
v2 : 6.8
v3 : 7.3 |
25 Jul 2022, 10:53
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-22 |
24 Nov 2021, 19:55
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 6.8
v3 : 7.8 |
| References | (MISC) https://us-cert.cisa.gov/ics/advisories/icsa-21-313-04 - Patch, Third Party Advisory, US Government Resource | |
| CPE | cpe:2.3:a:myscada:mydesigner:*:*:*:*:*:*:*:* |
19 Nov 2021, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-11-19 19:15
Updated : 2024-11-21 06:29
NVD link : CVE-2021-43555
Mitre link : CVE-2021-43555
CVE.ORG link : CVE-2021-43555
JSON object : View
Products Affected
myscada
- mydesigner