CVE-2021-26829
KEVMEDIUM 5.4EPSS 48.0%
OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm.
- CVSS v3.1 NVD
- 5.4 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N - CVSS v2.0 NVD
- 3.5 LOW
AV:N/AC:M/Au:S/C:N/I:P/A:N - EPSS
- 48.05% chance of exploitation in the next 30 days, 99th percentile
- CISA KEV
- added 2025-11-28
- Published
- 2021-06-11
- Updated
- 2025-12-02
Proof-of-concept exploits (1)
Security advisories
- http://forum.scadabr.com.br/t/report-falhas-de-seguranca-em-versoes-do-scadabr/3615/4
- https://www.forescout.com/blog/anatomy-of-a-hacktivist-attack-russian-aligned-group-targeā¦