CVE-2025-25067
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Feb 13, 2025
Updated: Mar 4, 2025
CWE ID 78
Summary
CVE-2025-25067 is a newly discovered vulnerability affecting mySCADA myPRO Manager. This issue allows a remote attacker to inject and execute arbitrary OS commands, posing a significant threat to the security of the affected system. Successful exploitation could result in unauthorized access, data theft, or system damage. It is crucial for users to update their mySCADA myPRO Manager software to the latest version to mitigate this risk. The vulnerability is due to insufficient input validation, enabling attackers to inject OS commands through certain inputs.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share