Vulnerabilities (CVE)

Filtered by vendor Openplcproject Subscribe
Filtered by product Openplc V3
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-31630 1 Openplcproject 2 Openplc V3, Openplc V3 Firmware 2023-12-10 9.0 HIGH 8.8 HIGH
Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on the "/hardware" page of the application.
CVE-2018-20818 1 Openplcproject 4 Openplc V2, Openplc V2 Firmware, Openplc V3 and 1 more 2023-12-10 7.5 HIGH 9.8 CRITICAL
A buffer overflow vulnerability was discovered in the OpenPLC controller, in the OpenPLC_v2 and OpenPLC_v3 versions. It occurs in the modbus.cpp mapUnusedIO() function, which can cause a runtime crash of the PLC or possibly have unspecified other impact.