İçeriğe atla
Noroxi

openplcproject kayıtları

openplcproject üreticisine ait 13 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 21
  3. 24
  4. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

13 kayıt
  • CVE-2021-31630
    43Planlayın

    Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on

    YüksekCVSS 8,8Kavram kanıtıEPSS %27

    openplcproject · openplc v3 firmware3 Ağu 2021

  • CVE-2024-34026
    40Planlayın

    A stack-based buffer overflow vulnerability exists in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC _v3 b4702061dc14d10248

    KritikCVSS 9,8İstismar yokEPSS %2

    openplcproject · openplc v3 firmware18 Eyl 2024

  • CVE-2018-20818
    39İzleyin

    A buffer overflow vulnerability was discovered in the OpenPLC controller, in the OpenPLC_v2 and OpenPLC_v3 versions.

    KritikCVSS 9,8İstismar yokEPSS %2

    openplcproject · openplc v2 firmware22 Nis 2019

  • CVE-2026-28205
    36İzleyin

    Initialization of a resource with an insecure default in OpenPLC_V3

    KritikCVSS 9,2İstismar yokEPSS %1

    openplcproject · openplc v3 firmware9 Nis 2026

  • CVE-2026-35556
    36İzleyin

    Plaintext storage of a password in OpenPLC_V3

    KritikCVSS 9,2İstismar yokEPSS %0

    openplcproject · openplc v3 firmware9 Nis 2026

  • CVE-2026-35063
    34İzleyin

    Missing Authorization in OpenPLC_V3

    YüksekCVSS 8,7İstismar yokEPSS %0

    openplcproject · openplc v3 firmware9 Nis 2026

  • CVE-2024-36980
    30İzleyin

    An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f7

    YüksekCVSS 7,5İstismar yokEPSS %1

    openplcproject · openplc v3 firmware18 Eyl 2024

  • CVE-2024-39590
    30İzleyin

    Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a3

    YüksekCVSS 7,5İstismar yokEPSS %1

    openplcproject · openplc v3 firmware18 Eyl 2024

  • CVE-2024-36981
    30İzleyin

    An out-of-bounds read vulnerability exists in the OpenPLC Runtime EtherNet/IP PCCC parser functionality of OpenPLC_v3 b4702061dc14d1024856f7

    YüksekCVSS 7,5İstismar yokEPSS %1

    openplcproject · openplc v3 firmware18 Eyl 2024

  • CVE-2024-39589
    30İzleyin

    Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a3

    YüksekCVSS 7,5İstismar yokEPSS %1

    openplcproject · openplc v3 firmware18 Eyl 2024

  • CVE-2026-31156
    26İzleyin

    A path injection vulnerability exists in OpenPLC v3 (2c82b0e79c53f8c1f1458eee15fec173400d6e1a) as the binary program compiled from glue_gene

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    openplcproject · openplc v3 firmware13 May 2026

  • CVE-2021-3351
    21İzleyin

    OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's Add New Device page.

    OrtaCVSS 5,4İstismar yokEPSS %1

    openplcproject · openplc2 Ağu 2021

  • CVE-2024-37741
    21İzleyin

    OpenPLC 3 through 9cd8f1b allows XSS via an SVG document as a profile picture.

    OrtaCVSS 5,4İstismar yokEPSS %0

    openplcproject · openplc v3 firmware28 Haz 2024