mySCADA myPRO is a multiplatform, human-machine interface (HMI) and supervisory control and data acquisition (SCADA) system that allows to visualize and control industrial processes.
The security researcher Michael Heinzl discovered multiple vulnerabilities in the myPRO product, some of which have been rated as critical severity. The flaws affect myPRO versions 8.20.0 and prior.
Heinzl published a security advisory for each of the vulnerabilities he discovered.
“The specific flaw exists within the parsing of HMI files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. Local attackers are able to exploit this issue to execute arbitrary code on affected installations of Cscape EnvisionRV. User interaction is required to exploit the vulnerability in that a user must open a malicious HMI file.” reads the advisory for the CVE-2021-44462 Horner Automation Cscape EnvisionRV HMI File Parsing Out-of-Bounds Write vulnerability.
The vulnerabilities impact organizations operating in critical infrastructure sectors, such as energy, food and agriculture, transportation systems, water and wastewater systems.
The exploitation of the addressed issues can allow to obtain sensitive information, upload arbitrary files remotely, bypass authentication, and OS command injection.
Chaining some of the vulnerabilities, a remote, unauthenticated attacker can take complete control of the vulnerable systems.
(SecurityAffairs – hacking, myPRO)