NetSight
high8.8

CVE-2021-31630

Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on the "/hardware" pag…

Impact

Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on the "/hardware" page of the application.

Affected products

VendorProductAffected versions
OpenplcprojectOpenplc V3 Firmware
All versions

Weakness classification

References