Insecure Password Storage in mySCADA myPRO Versions 8.20.0 and Prior

Insecure Password Storage in mySCADA myPRO Versions 8.20.0 and Prior

CVE-2021-43989 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes.

Learn more about our Web Application Penetration Testing UK.