OpenPLC Project OpenPLC v3
Approved changes feed: RSS · Atom
cpe:2.3:h:openplcproject:openplc_v3:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Openplcproject (65aa9aa3-a458-530b-911b-aa9e54bd32e6) |
|---|---|
| Product | Openplc V3 (e1a6f2ce-a73a-5db9-a318-aec386061c80) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-35556 |
not_vulnerable | 2026-06-08 07:59:14.131869 |
Plaintext storage of a password in OpenPLC_V3
OpenPLC_V3 is vulnerable to a Plaintext Storage of a Password vulnerability that could allow an attacker to retrieve credentials and access sensitive information.
Published: 2026-04-09T18:57:26.857Z
Updated: 2026-04-10T18:03:50.288Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35063 |
not_vulnerable | 2026-06-08 07:59:13.460981 |
Missing Authorization in OpenPLC_V3
OpenPLC_V3 REST API endpoint checks for JWT presence but never verifies the caller's role. Any authenticated user with role=user can delete any other user, including administrators, by specifying their user ID or they can create new accounts with role=admin, escalating to full administrator access.
Published: 2026-04-09T19:00:09.980Z
Updated: 2026-04-10T18:04:45.721Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28205 |
not_vulnerable | 2026-06-08 07:55:14.994214 |
Initialization of a resource with an insecure default in OpenPLC_V3
OpenPLC_V3 is vulnerable to an Initialization of a Resource with an Insecure Default vulnerability which could allow an attacker to gain access to the system by bypassing authentication via an API.
Published: 2026-04-09T18:54:58.694Z
Updated: 2026-04-10T18:02:22.971Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39590 |
vulnerable | 2026-06-08 06:41:51.139776 |
Details available
HIGH (7.5)
Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/IP request can lead to denial of service. An attacker can send a series of EtherNet/IP requests to trigger these vulnerabilities.This instance of the vulnerability occurs within the `Protected_Logical_Write_Reply` function
Published: 2024-09-18T14:35:54.423Z
Updated: 2025-11-04T16:12:28.934Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39589 |
vulnerable | 2026-06-08 06:41:51.137788 |
Details available
HIGH (7.5)
Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/IP request can lead to denial of service. An attacker can send a series of EtherNet/IP requests to trigger these vulnerabilities.This instance of the vulnerability occurs within the `Protected_Logical_Read_Reply` function
Published: 2024-09-18T14:35:54.295Z
Updated: 2025-11-04T16:12:27.921Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37741 |
not_vulnerable | 2026-06-08 06:39:48.061689 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-36981 |
vulnerable | 2026-06-08 06:39:45.984163 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-36980 |
vulnerable | 2026-06-08 06:39:45.981652 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34026 |
vulnerable | 2026-06-08 06:37:32.533451 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31630 |
not_vulnerable | 2026-06-08 05:31:53.789863 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20818 |
not_vulnerable | 2026-06-08 05:11:28.105992 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.