CVE-2021-43989 HIGH

CVE-2021-43989: mySCADA myPRO

Vendor Myscada
Product myPRO
Weakness CWE-916
Published December 23, 2021
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes.

Key dates

02Disclosure timeline

December 23, 2021 CVE published
September 16, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-32519 QSAN Storage Manager, XEVO, SANOS - Use of Password Hash With Insufficient Computational Effort CVE-2026-30790 RustDesk Login Proof Exposed in Cleartext on the Server Pro /api Channel Under TLS Downgrade CVE-2014-2354 Cogent DataHub Use of Password Hash With Insufficient Computational Effort CVE-2026-30789 RustDesk Auth Proof Uses Server-Controlled Salt/Challenge and Fast Double-SHA256, Enabling Offline Brute-Force CVE-2023-34433 PiiGAB M-Bus Use of Password Hash With Insufficient Computational Effort