CVE-2021-31630

Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on the "/hardware"…

published August 3, 2021

CVSS

—

EPSS

27%

Percentile

98.1

In the wild

Unconfirmed

What it is

Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on the "/hardware" page of the application.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.27075 · 98.1th percentile
Published: 2021-08-03T14:50Z

EPSS history

Timeline

03 AUG 14:50Z
Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on the "/hardware"…
cvelistv5