CVE-2021-33009 HIGH

CVE-2021-33009: mySCADA myPRO Unrestricted Upload of File with Dangerous Type

Vendor Myscada

Product myPRO

Weakness CWE-434 · Unrestricted file upload

Published May 13, 2022

Last update April 16, 2025

CVSS base score

7.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

What the vulnerability does

01Description

mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to the file system.

Key dates

May 13, 2022 CVE published

April 16, 2025 Record updated

External resources

Related vulnerabilities