CVE-2025-24865 CRITICAL

CVE-2025-24865: mySCADA myPRO Manager Missing Authentication for Critical Function

Vendor Myscada
Product myPRO Manager
Weakness CWE-306 · Missing auth
Published February 13, 2025
Last update February 14, 2025
View on NVD All CVEs

CVSS base score

10.0/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

The administrative web interface of mySCADA myPRO Manager can be accessed without authentication which could allow an unauthorized attacker to retrieve sensitive information and upload files without the associated password.

Key dates

02Disclosure timeline

February 13, 2025 CVE published
February 14, 2025 Record updated