HIGH
CVE-2021-26828
CVSS
8.8
KEV
Description
OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.
Summary dbcve.org
OpenPLC ScadaBR contains an authenticated arbitrary file upload vulnerability in the view_edit.shtm endpoint. Remote authenticated users can upload malicious JSP files and achieve remote code execution on the affected system. This affects versions through 0.9.1 on Linux and 1.12.4 on Windows.
Mitigation
Restrict file upload functionality to only allow safe file types, implement server-side validation of file content/mime type, store uploads outside webroot, and disable JSP execution in upload directories. Consider implementing authentication hardening and role-based access controls.
Weakness (CWE)
CWE-434
Unrestricted File Upload
EPSS Score
39.36%
Probability of exploitation in next 30 days
98.6th percentile
References
http://forum.scadabr.com.br/t/report-falhas-de-seguranca-em-versoes-do-scadabr/3615/4
Broken Link, Exploit, Vendor Advisory
http://packetstormsecurity.com/files/162564/ScadaBR-1.0-1.1CE-Linux-Shell-Upload.html
Exploit, Third Party Advisory
https://youtu.be/k1teIStQr1A
Exploit, Third Party Advisory
https://github.com/SCADA-LTS/Scada-LTS/pull/2174
Issue Tracking, Patch
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26828
US Government Resource
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.