VULNERABILITY INTELLIGENCE

CVE-2025-24865

CVSS score10 CRITICAL
EPSS probability7.25%
CISA KEVNot currently listed
Published2025-02-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

The administrative web interface of mySCADA myPRO Manager can be accessed without authentication which could allow an unauthorized attacker to retrieve sensitive information and upload files without the associated password.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-306

Primary references