vulnerability
OpenPLC v3
Critical
Summary
A critical vulnerability exists in OpenPLC v3, allowing authenticated attackers to write arbitrary files and escalate to arbitrary native code execution through the program upload process. This vulnerability affects critical infrastructure sectors globally and is being addressed with an upgrade to OpenPLC v4, which is end-of-life. The CISA recommends minimizing network exposure and implementing robust security practices to mitigate the risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data