CVE-2021-26828

🗓️ 11 Jun 2021 11:10:58Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 161 Views🌐 WEB

OpenPLC ScadaBR allows remote authenticated users to upload and execute arbitrary JSP files

Reporter	Title	Published	Views	Family All 23
0day.today	ScadaBR 1.0 / 1.1CE Windows Shell Upload Exploit	13 May 202100:00	–	zdt
0day.today	ScadaBR 1.0 / 1.1CE Linux Shell Upload Exploit	13 May 202100:00	–	zdt
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Openplcproject Scadabr	31 Mar 202102:39	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Openplcproject Scadabr	31 Mar 202102:39	–	githubexploit
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Openplcproject Scadabr	31 Mar 202102:39	–	githubexploit
BDU FSTEC	The system’s vulnerability regarding data collection and automation process control in ScadaBR, related to unlimited loading of dangerous type files, allows a intruder to execute arbitrary code.	13 Jul 202100:00	–	bdu_fstec
Circl	CVE-2021-26828	14 May 202101:56	–	circl
CISA KEV Catalog	OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability	3 Dec 202500:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	3 Dec 202512:00	–	cisa
CNNVD	Sensorweb ScadaBR 代码问题漏洞	13 May 202100:00	–	cnnvd

NVD

Node

AND

Node

scadabr scadabrRange≤1.12.4

AND

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/162564/ScadaBR-1.0-1.1CE-Linux-Shell-Upload.html
youtu	www.youtu.be/k1teIStQr1A
forum	www.forum.scadabr.com.br/t/report-falhas-de-seguranca-em-versoes-do-scadabr/3615/4
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
github	www.github.com/SCADA-LTS/Scada-LTS/pull/2174

Parameter	Position	Path	Description	CWE
view.name	request body	ScadaBR/view_edit.shtm	Authenticated arbitrary file upload vulnerability allowing remote code execution via view_edit.shtm (CVE-2021-26828)	CWE-434
view.xid	request body	ScadaBR/view_edit.shtm	Authenticated arbitrary file upload vulnerability allowing remote code execution via view_edit.shtm (CVE-2021-26828)	CWE-434
backgroundImageMP	request body	ScadaBR/view_edit.shtm	Authenticated arbitrary file upload vulnerability allowing remote code execution via view_edit.shtm (CVE-2021-26828)	CWE-434
upload	request body	ScadaBR/view_edit.shtm	Authenticated arbitrary file upload vulnerability allowing remote code execution via view_edit.shtm (CVE-2021-26828)	CWE-434
view.anonymousAccess	request body	ScadaBR/view_edit.shtm	Authenticated arbitrary file upload vulnerability allowing remote code execution via view_edit.shtm (CVE-2021-26828)	CWE-434
cmd	path	ScadaBR/uploads/{num}.jsp	Webshell JSP file uploaded to uploads directory and executable via cmd parameter	CWE-434

17 Jun 2026 03:43Current

8.6High risk

Vulners AI Score8.6

CVSS 26.5

CVSS 3.18.8

EPSS0.39096

SSVC