CVE-2021-26828

Warnung

Exploit

EPSS 80.02%
Veröffentlicht 11.06.2021 12:15:12
Zuletzt bearbeitet 04.12.2025 14:47:47
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.

Betroffene Produkte Warnungen 1 Metriken 4 CWE 1 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Scadabr ≫ Scadabr Version <= 0.9.1

Linux ≫ Linux Kernel Version-

Scadabr ≫ Scadabr Version <= 1.12.4

Microsoft ≫ Windows Version-

03.12.2025: CISA Known Exploited Vulnerabilities (KEV) Catalog

OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

Schwachstelle

OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.

Beschreibung

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	80.02%	0.991

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H