Openplcproject

Openplc V3 Firmware

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2024-36981

Exploit
  • EPSS 0.23%
  • Veröffentlicht 18.09.2024 15:15:15
  • Zuletzt bearbeitet 04.11.2025 17:15:53

An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of service. An attacker can send a ...

7.5

CVE-2024-39589

Exploit
  • EPSS 0.17%
  • Veröffentlicht 18.09.2024 15:15:15
  • Zuletzt bearbeitet 04.11.2025 17:15:54

Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/IP request can lead to denial of service. An attac...

7.5

CVE-2024-39590

Exploit
  • EPSS 0.17%
  • Veröffentlicht 18.09.2024 15:15:15
  • Zuletzt bearbeitet 04.11.2025 17:15:55

Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/IP request can lead to denial of service. An attac...

9.8

CVE-2024-34026

Exploit
  • EPSS 8.7%
  • Veröffentlicht 18.09.2024 15:15:14
  • Zuletzt bearbeitet 21.11.2024 09:17:56

A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted EtherNet/IP request can lead to remote code execution. An attacker...

7.5

CVE-2024-36980

Exploit
  • EPSS 0.41%
  • Veröffentlicht 18.09.2024 15:15:14
  • Zuletzt bearbeitet 04.11.2025 17:15:53

An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f71b4543298d77007b88. A specially crafted network request can lead to denial of service. An attacker can send a ...

5.4

CVE-2024-37741

Exploit
  • EPSS 0.36%
  • Veröffentlicht 28.06.2024 13:15:02
  • Zuletzt bearbeitet 21.11.2024 09:24:16

OpenPLC 3 through 9cd8f1b allows XSS via an SVG document as a profile picture.

9

CVE-2021-31630

Exploit
  • EPSS 86.78%
  • Veröffentlicht 03.08.2021 15:15:08
  • Zuletzt bearbeitet 21.11.2024 06:06:02

Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on the "/hardware" page of the application.

9.8

CVE-2018-20818

  • EPSS 0.46%
  • Veröffentlicht 22.04.2019 11:29:01
  • Zuletzt bearbeitet 21.11.2024 04:02:15

A buffer overflow vulnerability was discovered in the OpenPLC controller, in the OpenPLC_v2 and OpenPLC_v3 versions. It occurs in the modbus.cpp mapUnusedIO() function, which can cause a runtime crash of the PLC or possibly have unspecified other imp...