CVE-2021-26828
OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
CVSS
—
Sin CVSS
EPSS
39.4%
p98
KEV
SÍ
3 dic 2025
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Producto
OpenPLC / ScadaBR
Vulnerabilidad
OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
Añadido a KEV
3 dic 2025
Remediar antes de
24 dic 2025
Uso conocido en ransomware
No
Descripción resumida
OpenPLC ScadaBR contains an unrestricted upload of file with dangerous type vulnerability that allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.
Acción requerida
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notas
This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/SCADA-LTS/Scada-LTS/pull/2174 ; https://nvd.nist.gov/vuln/detail/CVE-2021-26828