CVE-2024-52034: Myscada Mypro Manager

Critical severity, CVSS 10.0. EPSS: 1.7% chance of exploitation in the next 30 days.

An OS Command Injection vulnerability exists within myPRO Manager. A parameter within a command can be exploited by an unauthenticated remote attacker to inject arbitrary operating system commands.

Affected products

• Myscada Mypro Manager: before 1.3 (fixed in 1.3)
• Myscada Mypro Runtime: before 9.2.1 (fixed in 9.2.1)

Published 2024-11-22. Last modified 2026-06-17.