You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: documentation/modules/exploit/windows/scada/mypro_cmdexe.md
+13-7Lines changed: 13 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,15 +4,20 @@
4
4
5
5
This module exploits a command injection vulnerability in mySCADA MyPRO <= v8.28.0 (CVE-2023-28384).
6
6
7
-
An authenticated remote attacker can exploit this vulnerability to inject arbitrary OS commands, which will get executed in the context of `NT AUTHORITY\SYSTEM`.
7
+
An authenticated remote attacker can exploit this vulnerability to inject arbitrary OS commands, which will get executed in the context of
8
+
`NT AUTHORITY\SYSTEM`.
8
9
This module uses the default admin:admin credentials, but any account configured on the system can be used to exploit this issue.
9
10
10
-
Versions <= 8.28.0 are affected. CISA published [ICSA-23-096-06](https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-06) to cover the security issues. The official changelog for the updated version, v8.29.0, is available [here](https://web.archive.org/web/20230320130928/https://www.myscada.org/changelog/?section=version-8-29-0), although it only mentions a "General security improvement" without further details.
11
+
Versions <= 8.28.0 are affected. CISA published [ICSA-23-096-06](https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-06) to cover
12
+
the security issues. The official changelog for the updated version, v8.29.0, is available
13
+
[here](https://web.archive.org/web/20230320130928/https://www.myscada.org/changelog/?section=version-8-29-0), although it only mentions a
14
+
"General security improvement" without further details.
11
15
12
16
**Vulnerable Application Installation**
13
17
14
18
A trial version of the software can be obtained from [the vendor](http://nsa.myscada.org/myPRO/WIN/myPRO_x64_8.28.0.exe).
15
-
For the product to work correctly, the project and log directories need to be configured first, which can be done through the web inteface (navigate to System > Storage).
19
+
For the product to work correctly, the project and log directories need to be configured first, which can be done through the web inteface
0 commit comments