OpenPLC_V3
view advisory published 2025-09-30
Successful exploitation of this vulnerability could cause a denial of service, making the PLC runtime process crash.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-54811US | — | — | ||
OpenPLC_V3 has a vulnerability in the enipThread function that occurs due to the lack of a return value. This leads to a crash when the server loop ends and execution hits an illeg… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-273-05 JSONself
- ICSA Advisory ICSA-25-273-05 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- FixedOpenPLC_v3
Pull request #292 resolves this issue. Users are advised to update OpenPLC_V3 to pull request #292 or later from the main GitHub repository.
https://github.com/thiagoralves/OpenPLC_v3
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan