1. Home
  2. CVE Database
  3. CVE-2025-24865
CRITICAL · 10.0

CVE-2025-24865

The administrative web interface of mySCADA myPRO Manager can be accessed without authentication which could allow an unauthorized attacker to retrieve sensitive information and upload files witho...

Vulnerability Description

The administrative web interface of mySCADA myPRO Manager can be accessed without authentication which could allow an unauthorized attacker to retrieve sensitive information and upload files without the associated password.

CVSS Score

10.0

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
MyscadaMypro< 1.4

Related Weaknesses (CWE)

CWE-306

References

FAQ

What is CVE-2025-24865?

CVE-2025-24865 is a vulnerability with a CVSS score of 10.0 (CRITICAL). The administrative web interface of mySCADA myPRO Manager can be accessed without authentication which could allow an unauthorized attacker to retrieve sensitive information and upload files witho...

How severe is CVE-2025-24865?

CVE-2025-24865 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2025-24865?

Check the references section above for vendor advisories and patch information. Affected products include: Myscada Mypro.