CVE-2021-41578

7.8 highEPSS 14%

High (7.8) in myscada mydesigner. EPSS 14% chance of exploitation in the next 30 days.

mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files. If an attacker can trick a victim into importing a malicious mep file, then they gain the ability to write arbitrary files to OS locations where the user has permission. This would typically lead to code execution.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2021-10-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

myscada:mydesigner

References

https://github.com/jacob-baines/vuln_disclosure/blob/main/vuln_2021_05.txt
https://github.com/jacob-baines/vuln_disclosure/blob/main/vuln_2021_05.txt

Check your stack JSON