CVE-2021-41578: Myscada Mydesigner

High severity, CVSS 7.8. EPSS: 10.8% chance of exploitation in the next 30 days.

mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files. If an attacker can trick a victim into importing a malicious mep file, then they gain the ability to write arbitrary files to OS locations where the user has permission. This would typically lead to code execution.

Affected products

• Myscada Mydesigner: up to and including 8.20.0

Published 2021-10-04. Last modified 2026-06-17.