CVE-2025-20014

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Jan 29, 2025
CWE ID 78

Summary

CVE-2025-20014 refers to a vulnerability in mySCADA myPRO where POST requests sent to a specific port with version information are not adequately neutralized. This issue could potentially allow an attacker to execute arbitrary commands on the affected system. Unsecured POST requests can lead to serious consequences, including data theft, denial of service attacks, or system compromise. mySCADA users are advised to update their software to mitigate this vulnerability and secure their systems against potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share