CVEvulnerability
CVE-2021-43987
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2021-12-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-912
Description
An additional, nondocumented administrative account exists in mySCADA myPRO Versions 8.20.0 and prior that is not exposed through the web interface, which cannot be deleted or changed through the regular web interface.
Affected configurations
• myscada mypro (<= 8.20.0)
Related
Weakness · CWE (1)
- CWE-912 Hidden Functionality weakness
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-355-01 Third Party Advisory, US Government Resource
- https://www.cisa.gov/uscert/ics/advisories/icsa-21-355-01 Third Party Advisory, US Government Resource