Description
Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on the "/hardware" page of the application.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 12 repositories · most starred shown
-
thewhiteh4t/cve-2021-31630 ★ 22 · Mar 28, 2024
Python script for exploiting command injection in Open PLC Webserver v3
-
Hunt3r0x/CVE-2021-31630-HTB ★ 9 · Mar 20, 2024
proof of Concept (PoC) exploit for CVE-2021-31630, targeting the OpenPLC service running on the WifineticTwo box on the Hack The Box platform.
-
machevalia/OpenPLC-CVE-2021-31630-RCE ★ 3 · Jun 23, 2025
-
hev0x/CVE-2021-31630-OpenPLC_RCE ★ 2 · Aug 2, 2021
Exploit for Authenticated Remote Code Execution on OpenPLC v3 Webserver
-
adibna/cve-2021-31630 ★ 1 · Jun 21, 2024
This is a automation of cve-2021-31630 exploitation
-
FlojBoj/CVE-2021-31630 ★ 0 · Jul 26, 2024
POC Exploit for CVE-2021-31630 written in Python3 and using C reverse shell with non-blocking mode
-
manuelsantosiglesias/CVE-2021-31630 ★ 0 · Jul 24, 2024
OpenPLC 3 WebServer Authenticated Remote Code Execution.
-
junnythemarksman/CVE-2021-31630 ★ 0 · Jun 4, 2024
Modified the PoC CVE-2021-31630 script by Fellipe Oliveira for HTB
-
mind2hex/CVE-2021-31630-OpenPLC-3-Authenticated-RCE ★ 0 · Apr 15, 2024
OpenPLC 3 WebServer Authenticated Remote Code Execution.
-
behindsecurity/htb-wifinetictwo-exploit ★ 0 · Apr 4, 2024
A simple python script to exploit CVE-2021-31630 on HTB WifineticTwo CTF
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.