OpenPLC_v3

OpenPLC 런타임 버전 3 ⚠️ 이 프로젝트는 수명 종료End of Life 상태이며 더 이상 유지 관리되지 않습니다. OpenPLC Runtime v4로 대체되었습니다. 설치 지침, 문서 및 지원을 위해 새 저장소를 방문하십시오. OpenPLC는 사용하기 쉬운 소프트웨어를 기반으로 하는 오픈소스 프로그래밍 가능한 논리 제어기입니다. 우리의 초점은 자동화와 연구를 위한 저비용 산업용 솔루션을 제공하는 것입니다. OpenPLC는 전체 소스 코드를 제공하는 유일한 컨트롤러이기 때문에 산업 사이버 보안 연구를 위한 프레임워크로 많...

OpenPLC_v3

OpenPLC Runtime version 3 소개 OpenPLC는 사용하기 쉬운 소프트웨어 기반 오픈소스 프로그래머블 로직 컨트롤러입니다. 우리의 초점은 자동화와 연구를 위한 저비용 산업용 솔루션을 제공하는 것입니다. OpenPLC는 전체 소스 코드를 제공하는 유일한 컨트롤러이기 때문에 산업 사이버보안 연구를 위한 프레임워크로서 많은 연구 논문에서 사용되어 왔습니다. OpenPLC 프로젝트는 세 가지 하위 프로젝트로 구성됩니다: 1. Runtime 2. Programming editor 3. HMI builder 설치...

CVE-2026-35226 Out-of-bounds Write in CODESYS PROFINET Controller

An out‑of‑bounds write vulnerability in the CODESYS PROFINET Controller allows an unauthenticated attacker on the same network segment to send malformed PROFINET communication data that triggers an exception in the affected PLC application. The exception is handled by the CODESYS Control runtime...

Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2025-39721)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505738; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2026-12819

Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions...

CVE-2026-25293

Buffer overflow due to incorrect authorization in PLC FW...

Siemens SIMATIC S7 PLC Web Server

SUMMARY SIMATIC S7 PLCs contain multiple vulnerabilities in the web server that could allow an attacker to perform cross-site scripting attacks. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix...

CVE-2026-25293

Buffer overflow due to incorrect authorization in PLC FW...

EUVD-2026-26992

Buffer overflow due to incorrect authorization in PLC FW...

CVE-2026-25293

CVE-2026-25293 : A buffer overflow due to incorrect authorization is reported in PLC FW. Affected component is the PLC firmware; the root cause is improper authorization checks leading to memory corruption. The CVSS 3.1 vector indicates adjacent access, no privileges required, no user interaction...

CVE-2026-25293 Incorrect authorization in PLC FW

Buffer overflow due to incorrect authorization in PLC FW...

CVE-2026-25293

Buffer overflow due to incorrect authorization in PLC FW...

CVE-2026-6284

An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible...

EUVD-2026-23442

An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible...

CVE-2026-6284

An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible...

CVE-2026-6284

An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible...

EUVD-2024-17238

An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on t...

CVE-2024-1490

An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC. If user-defined scripts are permitted, OpenVPN may allow the execution of arbitrary shell commands enabling the attacker to run arbitrary commands on t...

Contemporary Controls BASC 20T

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to enumerate the functionality of each component associated with the PLC, reconfigure, rename, delete, perform file transfers, and make remote procedure calls. 2. RECOMMENDED PRACTICES CISA recommends users...

CVE-2025-40943

Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering an authorized user, who has the function right "Read diagnostics", to import a specially crafted trace file. The malicious trace file is insufficiently sanitiz...