CVE-2023-28716

—

CVSS 3.1

8.8 high

EPSS

5%p91

Published

Apr 27, 2023 (Apr 27, 2023)

Modified

Jun 17, 2026

Description

mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands.

Vendors: myscada
Products: mypro
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.5%)

In the news1 stories

CISA Warns of Critical ICS Flaws in Hitachi, mySCADA, ICL, and Nexx Products

The Hacker NewsApr 8, 04:44 UTC · Apr 8, 2023Advisory CVE-2022-3682 CVE-2023-28400 CVE-2023-28716+5 CVEs

60