Back to Database
Status published
Critical
CVE-2024-47407
mySCADA myPRO OS Command Injection
Vulnerability Description
A parameter within a command does not properly validate input within myPRO Manager which could be exploited by an unauthenticated remote attacker to inject arbitrary operating system commands.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-47407
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Michael Heinzl reported these vulnerabilities to CISA.
More from mySCADA
View All →CVE-2025-35941
mySCADA PRO Manager Password Disclosure
Medium
5.5
CVE-2025-25067
mySCADA myPRO Manager OS Command Injection
Critical
9.3
CVE-2025-24865
mySCADA myPRO Manager Missing Authentication for Critical Function
Critical
10
CVE-2025-23411
mySCADA myPRO Manager Cross-Site Request Forgery
Medium
5.1
CVE-2025-22896
mySCADA myPRO Manager Cleartext Storage of Sensitive Information
Critical
9.2
Affected Vendor
mySCADA
View all reports →Affected Software
myPRO Manager, myPRO Runtime
Vulnerable Versions:
0
Timeline
Official Publish:
November 22nd, 2024
Last Modified:
November 25th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H