Description
OpenPLC_V3 is vulnerable to a cross-site request forgery (CSRF) attack
due to the absence of proper CSRF validation. This issue allows an
unauthenticated attacker to trick a logged-in administrator into
visiting a maliciously crafted link, potentially enabling unauthorized
modification of PLC settings or the upload of malicious programs which
could lead to significant disruption or damage to connected systems.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenPLC_V3 | OpenPLC_V3 | < pull request #310 | pull request #310 |
Advisories 1
- ICSA-25-345-10 OpenPLC_V3 (Update A) CISA ICS & IT advisories · Apr 9, 2026