March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – MuddyWater APT – Active IOCs
August 24, 2022
Rewterz Threat Advisory – ICS: Measuresoft ScadaPro Server and Client Vulnerabilities
August 25, 2022
Rewterz Threat Alert – MuddyWater APT – Active IOCs
August 24, 2022
Rewterz Threat Advisory – ICS: Measuresoft ScadaPro Server and Client Vulnerabilities
August 25, 2022
Severity
High
Analysis Summary
CVE-2022-2234
mySCADA myPRO could allow a remote authenticated attacker to execute arbitrary commands on the system. By modifying parameters to run commands directly in the operating system, an attacker could exploit this vulnerability to execute arbitrary commands on the system.
Impact
- Command Execution
Indicators Of Compromise
CVE
- CVE-2022-2234
Affected Vendors
mySCADA
Affected Products
- mySCADA myPRO 7.0.26
- mySCADA myPRO 8.19.0
- mySCADA myPRO 8.18.0
- mySCADA myPRO 8.17.0
- mySCADA myPRO 8.20.0
Remediation
Refer to CISA-CERT Advisory for the patch, upgrade, or suggested workaround information.
CISA-CERT Advisory