Quantum Secular Labs / Blog / Advisories

CVE-2018-11311: Myscada Mypro: Use of Hard-coded Credentials

CVE-2018-11311 is rated critical with a CVSS v3.0 base score of 9.1 and affects Myscada Mypro. Per its scoring, it can be exploited over the network, without authentication, without any user interaction.

Vulnerability description

A hardcoded FTP username of myscada and password of Vikuk63 in 'myscadagate.exe' in mySCADA myPRO 7 allows remote attackers to access the FTP server on port 2121, and upload files or list directories, by entering these credentials.

Severity breakdown

CVSS v3.0 9.1: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

• Attack vector: Network. Exploitable remotely over the network, with no need for local or physical access.
• Attack complexity: Low. No special conditions; the attack can be repeated reliably.
• Privileges required: None. No account or prior access is needed.
• User interaction: None. No action from any user is needed.
• Scope: Unchanged. Impact stays within the vulnerable component.
• Confidentiality impact: High. Total loss of confidentiality; sensitive data can be fully disclosed.
• Integrity impact: High. Total loss of integrity; data or system state can be fully modified.
• Availability impact: None. No effect on availability.

Underlying weakness

CWE-798: Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

Affected products

• Myscada Mypro: 7.0

References

• https://emreovunc.com/blog/en/mySCADA-myPRO7-Exploit.pdf
• https://github.com/EmreOvunc/mySCADA-myPRO-7-Hardcoded-FTP-Username-and-Password
• https://www.exploit-db.com/exploits/44656/