CVE-2021-26828

OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

Scadabr

OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.

11. Jun 2021

Ausgewertete Quellen

• Hersteller
  http://forum.scadabr.com.br/t/report-falhas-de-seguranca-em-versoes-do-scadabr/3615/4
• Hinweis
  http://packetstormsecurity.com/files/162564/ScadaBR-1.0-1.1CE-Linux-Shell-Upload.html
• Hinweis
  https://youtu.be/k1teIStQr1A
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26828
• CISA
  OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
• NVD
  CVE-2021-26828