mySCADA myPRO Manager OS Command Injection Vulnerability

A command injection vulnerability has been identified in mySCADA myPRO Manager versions prior to 1.4. This vulnerability allows remote attackers to execute arbitrary operating system commands. The issue arises from improper validation of user input, enabling command injection exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of operating system commands on the affected server.

Remediation

Users are advised to update to mySCADA myPRO Manager version 1.4, which is available for download on the mySCADA website.