What’s Vulnerable › Vulnerabilities

CVE-2021-43987: mySCADA myPRO

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-12-23 · updated 2026-06-17
• Weakness: CWE-912

Description

An additional, nondocumented administrative account exists in mySCADA myPRO Versions 8.20.0 and prior that is not exposed through the web interface, which cannot be deleted or changed through the regular web interface.

Affected products

• mySCADA myPRO: through 8.20.0

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-21-355-01
• https://www.cisa.gov/uscert/ics/advisories/icsa-21-355-01

Get alerted when CVE-2021-43987 or the next vulnerability affects your stack