{ "id": "CVE-2023-28384", "sourceIdentifier": "ics-cert@hq.dhs.gov", "published": "2023-04-27T23:15:14.867", "lastModified": "2023-04-28T12:58:13.110", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system commands." } ], "metrics": {}, "weaknesses": [ { "source": "ics-cert@hq.dhs.gov", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-78" } ] } ], "references": [ { "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-06", "source": "ics-cert@hq.dhs.gov" } ] }