CVE-2021-41578

mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files

published October 4, 2021

CVSS
—
EPSS
11%
Percentile
95.8
In the wild
Unconfirmed
What it is

mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files. If an attacker can trick a victim into importing a malicious mep file, then they gain the ability to write arbitrary files to OS locations where the user has permission. This would typically lead to code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10779 · 95.8th percentile
Published
2021-10-04T17:38Z
EPSS history
Timeline
  • 04 OCT 17:38Z
    mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files
    cvelistv5