MSRXVulnerabilities / CVE-2021-26828
CVE-2021-26828
Published 2021-06-11 · Analyzed
CVE-2021-26828
OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
Exploited in the wild: CISA added it to the Known Exploited Vulnerabilities catalog on 2025-12-03, with a fix-by date of 2025-12-24. Patch it first.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
8.8 HIGH
CVSS 3.1 · NVD
CVSS 3.1 · NVD
39%
chance of exploitation in the next 30 days (EPSS; higher than 98% of CVEs)
chance of exploitation in the next 30 days (EPSS; higher than 98% of CVEs)
OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.
Affected products
- scadabr scadabr: ≤ 0.9.1; ≤ 1.12.4
Weakness: CWE-434
5 references (advisories, patches, write-ups)
- http://forum.scadabr.com.br/t/report-falhas-de-seguranca-em-versoes-do-scadabr/3615/4 · Broken Link, Exploit, Vendor Advisory
- http://packetstormsecurity.com/files/162564/ScadaBR-1.0-1.1CE-Linux-Shell-Upload.html · Exploit, Third Party Advisory
- https://youtu.be/k1teIStQr1A · Exploit, Third Party Advisory
- https://github.com/SCADA-LTS/Scada-LTS/pull/2174 · Issue Tracking, Patch
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26828 · US Government Resource
Sources: NVD, CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.