CVE-2021-47770

EIP tracks 1 public exploit for CVE-2021-47770. PoCs published by Fellipe Oliveira.

AI-analyzed exploit summary This exploit demonstrates an authenticated remote code execution vulnerability in OpenPLC v3 by uploading a malicious PLC program that includes a reverse shell payload. The exploit authenticates, uploads a crafted program, and triggers execution to achieve RCE.

OpenPLC v3 contains an authenticated remote code execution vulnerability that allows attackers with valid credentials to inject malicious code through the hardware configuration interface. Attackers can upload a custom hardware layer with embedded reverse shell code that establishes a network connection to a specified IP and port, enabling remote command execution.