CVE-2021-47770 — OpenPLC 3 - Remote Code Execution
OpenPLC v3 contains an authenticated remote code execution vulnerability that allows attackers with valid credentials to inject malicious code through the hardware configuration…
Published: 2026-01-21 · CVSS: 8.6 · CVSS 4.0
OpenPLC v3 contains an authenticated remote code execution vulnerability that allows attackers with valid credentials to inject malicious code through the hardware configuration interface. Attackers can upload a custom hardware layer with embedded reverse shell code that establishes a network connection to a specified IP and port, enabling remote command execution.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7