CVE-2025-22896

CVE-2025-22896 is a critical vulnerability affecting mySCADA myPRO Manager, where the software stores credentials in cleartext, allowing an attacker to easily obtain sensitive information. With a CVSS score of 7.5 (HIGH), this vulnerability is easily exploitable over the network without authentication or user interaction, leading to a high impact on confidentiality. While not currently in CISA’s KEV catalog, a Metasploit module exists for credential harvesting, indicating readily available exploit code and a high potential for exploitation. Community discussion, though limited, acknowledges the vulnerability and the existence of the Metasploit module.