vendor:
OpenPLC WebServer
by:
Kai Feng
7.1
CVSS
HIGH
Denial of Service
285
CWE
Product Name: OpenPLC WebServer
Affected Version From: Version 3
Affected Version To: Version 2
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested: Ubuntu 20.04
2023
OpenPLC WebServer 3 – Denial of Service
This exploit allows an attacker to remotely execute code on the OpenPLC_v3 WebServer. The vulnerability occurs when the web server fails to properly handle user authentication, allowing an attacker to bypass authentication and gain unauthorized access to the server. By exploiting this vulnerability, an attacker can perform various malicious activities, including uploading and executing arbitrary code on the target system.
Mitigation:
To mitigate this vulnerability, it is recommended to update to the latest version of OpenPLC WebServer and ensure proper user authentication and access control measures are in place.