{"id":"CVE-2017-12730","aliases":["EUVD-2017-4269","GHSA-m2x6-rrgv-9p5h"],"status":"published","title":"An Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior....","description":"An Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior. Application services utilize unquoted search path elements, which could allow an attacker to execute arbitrary code with elevated privileges.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00733,"percentile":0.54619,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-428"],"published":"2017-10-06T04:00:00Z","modified":"2026-06-17T01:03:51Z","products":[{"vendor":"myscada","product":"mypro"},{"vendor":"myscada technologies","product":"myscada mypro"}],"references":[{"url":"http://www.securityfocus.com/bid/100815","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-17-255-01","tags":["x_refsource_MISC","x_transferred","Mitigation","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12730"},{"url":"https://github.com/advisories/GHSA-m2x6-rrgv-9p5h"}],"sources":{"cve":[{"id":"CVE-2017-12730","description":"An Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior. Application services utilize unquoted search path elements, which could allow an attacker to execute arbitrary code with elevated privileges.","status":"published","published":"2017-10-06T04:00:00Z","modified":"2024-08-05T18:43:56.662Z","cwes":["CWE-428"],"updated_at":"2026-11-02T14:33:17.59533Z"}],"euvd":[{"id":"EUVD-2017-4269","description":"An Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior. Application services utilize unquoted search path elements, which could allow an attacker to execute arbitrary code with elevated privileges.","status":"published","published":"2017-10-06T04:00:00Z","modified":"2024-08-05T18:43:56Z","updated_at":"2026-11-03T02:23:20.716903Z"}],"ghsa":[{"id":"GHSA-m2x6-rrgv-9p5h","title":"An Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior....","description":"An Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior. Application services utilize unquoted search path elements, which could allow an attacker to execute arbitrary code with elevated privileges.","status":"published","published":"2022-05-13T01:37:44Z","modified":"2023-02-01T05:08:52Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:50:52.735498Z"}],"nvd":[{"id":"CVE-2017-12730","description":"An Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior. Application services utilize unquoted search path elements, which could allow an attacker to execute arbitrary code with elevated privileges.","status":"published","published":"2017-10-06T04:29:00.217Z","modified":"2026-06-17T01:03:51.403Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:04:01.734197Z"}]}}