VULNERABILITY INTELLIGENCE
CVE-2021-47770
CVSS score8.8 HIGH
EPSS probability0.75%
CISA KEVNot currently listed
Published2026-01-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
OpenPLC v3 contains an authenticated remote code execution vulnerability that allows attackers with valid credentials to inject malicious code through the hardware configuration interface. Attackers can upload a custom hardware layer with embedded reverse shell code that establishes a network connection to a specified IP and port, enabling remote command execution.
Weakness classification
- disclosure@vulncheck.com: CWE-94