CVE-2024-47407: Myscada Mypro Manager

Critical severity, CVSS 10.0. EPSS: 63.8% chance of exploitation in the next 30 days.

A parameter within a command does not properly validate input within myPRO Manager which could be exploited by an unauthenticated remote attacker to inject arbitrary operating system commands.

Affected products

• Myscada Mypro Manager: before 1.3 (fixed in 1.3)
• Myscada Mypro Runtime: before 9.2.1 (fixed in 9.2.1)

Published 2024-11-22. Last modified 2026-06-17.