critical9.1Public exploit code
CVE-2018-11311
A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attackers to access the FTP server on port 21…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- mySCADA myPRO 7 - Hardcoded Credentials2020-06-25 · remote · hardware
Impact
A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attackers to access the FTP server on port 2121, and upload files or list directories, by entering these credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Myscada | Mypro | Version 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://emreovunc.com/blog/en/mySCADA-myPRO7-Exploit.pdf
- https://github.com/EmreOvunc/mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password
- https://www.exploit-db.com/exploits/44656/
- https://emreovunc.com/blog/en/mySCADA-myPRO7-Exploit.pdf
- https://github.com/EmreOvunc/mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password
- https://www.exploit-db.com/exploits/44656/