A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attackers to access the FTP server on port 2121, and upload files or list directories, by entering these credentials.
References
| Link | Resource |
|---|---|
| https://emreovunc.com/blog/en/mySCADA-myPRO7-Exploit.pdf | Mitigation Technical Description Third Party Advisory |
| https://github.com/EmreOvunc/mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password | Mitigation Technical Description Third Party Advisory |
| https://www.exploit-db.com/exploits/44656/ | Mitigation Third Party Advisory VDB Entry |
| https://emreovunc.com/blog/en/mySCADA-myPRO7-Exploit.pdf | Mitigation Technical Description Third Party Advisory |
| https://github.com/EmreOvunc/mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password | Mitigation Technical Description Third Party Advisory |
| https://www.exploit-db.com/exploits/44656/ | Mitigation Third Party Advisory VDB Entry |
Configurations
History
21 Nov 2024, 03:43
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://emreovunc.com/blog/en/mySCADA-myPRO7-Exploit.pdf - Mitigation, Technical Description, Third Party Advisory | |
| References | () https://github.com/EmreOvunc/mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password - Mitigation, Technical Description, Third Party Advisory | |
| References | () https://www.exploit-db.com/exploits/44656/ - Mitigation, Third Party Advisory, VDB Entry |
Information
Published : 2018-05-20 22:29
Updated : 2024-11-21 03:43
NVD link : CVE-2018-11311
Mitre link : CVE-2018-11311
CVE.ORG link : CVE-2018-11311
JSON object : View
Products Affected
myscada
- mypro
CWE
CWE-798
Use of Hard-coded Credentials