CNNVD-202508-197 Information
Aug 04, 2025
cve
CNNVD ID
CNNVD-202508-197
Related CVE
- CNNVD Published: 2025-08-04
Description (Chinese)
OpenPLC Runtime version 3是Thiago Alves个人开发者的一个可编程逻辑控制器。 OpenPLC Runtime version 3存在代码问题漏洞，该漏洞源于允许经过身份验证的用户上传任意文件并公开访问。
Description (English)
OpenPLC Runtme version 3 is a programmable logical controller for Thiago Alves personal developers. OpenPLC Runtme version 3 has a code gap, which stems from allowing a user with authentication to upload an arbitrary file and access it publicly.
Hazard Level
High
Vulnerability Type
代码问题
Affected Vendor
个人开发者
Published
2025-08-04
Last Modified
2026-02-24
References
https://github.com/Eyodav/OpenPLC-Insecure-File-Upload https://github.com/thiagoralves/OpenPLC_v3/blob/9cd8f1b53a50f9d38708096bfc72bcbb1ef47343/webserver/pages.py#L992 https://access.redhat.com/security/cve/cve-2025-54962
Share on: