VYPR

myDESIGNER

by Scada Lts

CVEs (2)

  • CVE-2021-41578HigOct 4, 2021
    risk 0.52cvss 7.8epss 0.11

    mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files. If an attacker can trick a victim into importing a malicious mep file, then they gain the ability to write arbitrary files to OS locations where the user has permission. This…

  • CVE-2021-43555HigNov 19, 2021
    risk 0.50cvss 7.3epss 0.38

    mySCADA myDESIGNER Versions 8.20.0 and prior fails to properly validate contents of an imported project file, which may make the product vulnerable to a path traversal payload. This vulnerability may allow an attacker to plant files on the file system in arbitrary locations or…