PT-2018-10473 · Myscada · Myscada Mypro

Emreovunc · Published 2018-05-20 · Updated 2018-06-26 · CVE-2018-11311

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions mySCADA myPRO version 7

Description The issue allows remote attackers to access the FTP server on port 2121, upload files, or list directories by using a hardcoded FTP username and password. The hardcoded credentials are username set to 'myscada' and password set to 'Vikuk63' in the 'myscadagate.exe' file.

Recommendations For mySCADA myPRO version 7, consider changing the hardcoded FTP credentials to secure ones, and restrict access to the FTP server on port 2121 until a patch is available. As a temporary workaround, restrict the use of the 'myscadagate.exe' file to minimize the risk of exploitation.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2018-11311

Affected Products

Myscada Mypro

References · 6

• 🔥 https://github.com/EmreOvunc/mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password · Exploit
• 🔥 https://exploit-db.com/exploits/48620 · Exploit
• 🔥 https://exploit-db.com/exploits/44656 · Exploit
• https://osv.dev/vulnerability/CVE-2018-11311 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-11311 · Security Note
• https://emreovunc.com/blog/en/mySCADA-myPRO7-Exploit.pdf · Note