CVEvulnerability
CVE-2018-11517
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-05-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
mySCADA myPRO 7 allows remote attackers to discover all ProjectIDs in a project by sending all of the prj parameter values from 870000 to 875000 in t=0&rq=0 requests to TCP port 11010.
Affected configurations
• myscada mypro 7.0
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://github.com/EmreOvunc/mySCADA-myPRO-7-projectID-Disclosure Exploit, Third Party Advisory
- https://www.emreovunc.com/blog/en/mypro_enum_projectid.rb Not Applicable
- https://github.com/EmreOvunc/mySCADA-myPRO-7-projectID-Disclosure Exploit, Third Party Advisory
- https://www.emreovunc.com/blog/en/mypro_enum_projectid.rb Not Applicable