[0day-rubbish] mySCADA PRO Runtime 9.4.0 (container deployment msxrun; earlier versions with the same upgrade branch are likely affected) Unauthenticated OS command injection to root RCE (9.4)

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-26 15:28 UTC
  • Importiert: 2026-08-26 17:02 UTC
  • Quelle-ID: full_disc
  • uid_hash: 9257bb71d4890d84909902e32ecf75a1f7b2c6cf15c94554d0c99c133ef1d2db
Full Disclosure

Inhalt

Posted by disclosure via Fulldisclosure on Aug 26 0day Rubbish Research Team is publicly disclosing a vulnerability in mySCADA PRO Runtime 9.4.0 (container deployment

msxrun; earlier versions with the same upgrade branch are likely affected).

Type: Unauthenticated OS command injection to root RCE (CWE-78)

CVSS: 9.4 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Impact: Unauthenticated root command execution on the SCADA runtime, enabling process data theft, configuration

tampering, and...

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Full Disclosure

full_disc

 threat_intel - de https://seclists.org/rss/fulldisclosure.rss
Zurueck zur Eintrags-Liste