CVE-2023-29150

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Apr 27, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-291517.8Uncontrolled search path element in some Intel(R) PSR SDK before version 1.0.0.20 may allow an authenticated user to potentially enable escaCVE-2023-291528.1By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account.CVE-2023-291534.9Uncontrolled resource consumption for some Intel(R) SPS firmware before version SPS_E5_06.01.04.002.0 may allow a privileged user to potentiCVE-2023-291547.2SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product witCVE-2023-291559.8Versions of INEA ME RTU firmware 3.36b and prior do not require authentication to the "root" account on the host system of the device. This CVE-2023-291566.8DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection. AnCVE-2023-291577.8Improper access control in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalatioCVE-2023-291589.1SUBNET PowerSYSTEM Center versions 2020 U10 and prior are vulnerable to replay attacks which may result in a denial-of-service condition or CVE-2023-291597.5Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to vieCVE-2023-29165.3The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.11.1 via the CVE-2023-291607.8Stack-based buffer overflow vulnerability exists in FRENIC RHC Loader v1.1.0.3. If a user opens a specially crafted FNE file, sensitive infoCVE-2023-291617.8Uncontrolled search path in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalati
CVE-2023-29150: High severity, CVSS 8.8 | Vulnix