CVSS 3.0
9.1 criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NCVE-2018-11311
Critical (9.1) in myscada mypro. EPSS 15% chance of exploitation in the next 30 days.
A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attackers to access the FTP server on port 2121, and upload files or list directories, by entering these credentials.
Severity
- EPSS
- 15% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- CWE
- CWE-798
- Published
- Modified
- Record from
- the NVD, synced
Affected
- myscada:mypro
References
- https://emreovunc.com/blog/en/mySCADA-myPRO7-Exploit.pdf
- https://github.com/EmreOvunc/mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password
- https://www.exploit-db.com/exploits/44656/
- https://emreovunc.com/blog/en/mySCADA-myPRO7-Exploit.pdf
- https://github.com/EmreOvunc/mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password