CVE-2017-12730

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior. Application services utilize unquoted search path elements, which could allow an attacker to execute arbitrary code with elevated privileges.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-428

Affected software

Vendor	Product	Versions
n/a	mySCADA myPRO	mySCADA myPRO

References

http://www.securityfocus.com/bid/100815Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-255-01Mitigation, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/100815Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-255-01Mitigation, Third Party Advisory, US Government Resource

Timeline

Published: Oct 6, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-127319.8A SQL Injection issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSi CVE-2017-127326.8A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. A function reads a packet to indicate the next p CVE-2017-127339.8A Missing Authentication for Critical Function issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel In CVE-2017-127347.5A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V1.81.2). An attacker with network access to the i CVE-2017-127357.4A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). An attacker who performs a Man-in-the-Middl CVE-2017-127368.8After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions. This CVE-2017-127375.3An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi0 CVE-2017-127386.1An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi0 CVE-2017-127399.8An issue was discovered on Siemens SICAM RTUs SM-2556 COM Modules with the firmware variants ENOS00, ERAC00, ETA2, ETLS00, MODi00, and DNPi0 CVE-2017-12748.8IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could allow an authenticated attacker to execute CVE-2017-127405.9Siemens LOGO! Soft Comfort (All versions before V8.2) lacks integrity verification of software packages downloaded via an unprotected commun CVE-2017-127417.5Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be restarted manually.