Critical · published December 23, 2021
🚨 A failure to lock the door means anyone can wander into mySCADA myPRO Versions 8.20.0 and earlier! This vulnerability allows unauthenticated remote attackers to access the system without any form of authentication. 🔥 Think of it like leaving the front door wide open at a bank — anyone could just stroll in and start accessing sensitive information without anyone batting an eye! No credentials? No problem! This is a recipe for disaster. An attacker could waltz right in, potentially manipulating or stealing sensitive operational data, and wreak havoc on your systems. With no authentication required, the attack surface is alarmingly large, making this an urgent issue to address immediately!
Think of it like leaving the front door wide open at a bank — anyone could just stroll in and start accessing sensitive information without anyone batting an eye! No credentials? No problem! CVE-2021-43985 allows unauthenticated remote attackers to bypass all security measures and access mySCADA myPRO systems, due to a failure in enforcing authentication and authorization checks.
This is a recipe for disaster. An attacker could waltz right in, potentially manipulating or stealing sensitive operational data, and wreak havoc on your systems. With no authentication required, the attack surface is alarmingly large, making this an urgent issue to address immediately! Update your mySCADA myPRO to version 8.20.1 or later to patch this vulnerability. Additionally, review your network security policies to ensure that remote access is limited and monitored appropriately. Always pick up the pace on security updates! This is fixable! Get that update rolling, lock down your doors, and you’ll be back on track in no time! 🛡️