CVE-2024-50054: Myscada Mypro Manager

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

The back-end does not sufficiently verify the user-controlled filename parameter which makes it possible for an attacker to perform a path traversal attack and retrieve arbitrary files from the file system.

Affected products

• Myscada Mypro Manager: before 1.3 (fixed in 1.3)
• Myscada Mypro Runtime: before 9.2.1 (fixed in 9.2.1)

Published 2024-11-22. Last modified 2026-06-17.