CVE-2021-31630
Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on the "/hardware"...
- Published
- Aug 3, 2021
- Updated
- Aug 3, 2024
- Assigning CNA
- mitre
- Evidence observed
- Aug 6, 2026
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HModerate · next 30 days
- Percentile
- 98.0%
- Model date
- Oct 17, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on the "/hardware" page of the application.
Sources
- cve-2021-31630Exploit
This is a automation of cve-2021-31630 exploitation
- htb-wifinetictwo-exploitExploit
A simple python script to exploit CVE-2021-31630 on HTB WifineticTwo CTF
- CVE-2021-31630Exploit
POC Exploit for CVE-2021-31630 written in Python3 and using C reverse shell with non-blocking mode
- CVE-2021-31630-HTBExploit
proof of Concept (PoC) exploit for CVE-2021-31630, targeting the OpenPLC service running on the WifineticTwo box on the Hack The Box platform.
- OpenPLC-CVE-2021-31630-RCEExploit
Python 3.13+ proof-of-concept exploit for CVE-2021-31630, enabling authenticated remote code execution on OpenPLC v3 via malicious hardware layer upload. Includes Nuclei detection templates for default credentials and vulnerability checks.
- CVE-2021-31630Exploit
OpenPLC 3 WebServer Authenticated Remote Code Execution.
OpenPLC 3 WebServer Authenticated Remote Code Execution.
- cve-2021-31630Exploit
Python script for exploiting command injection in Open PLC Webserver v3
- CVE-2021-31630-OpenPLC_RCEExploit
Exploit for Authenticated Remote Code Execution on OpenPLC v3 Webserver
- CVE-2021-31630Exploit
Modified proof-of-concept exploit for CVE-2021-31630 targeting a web application vulnerability with reverse shell payload generation and remote code execution.
- OpenPLC_v3PoC
To reproduce CVE-2021-31630
- CVE-2021-31630Exploit
Exploit for CVE-2021-31630 in OpenPLC, providing a Python script and manual steps to achieve remote code execution via malicious ST file upload and hardware code injection.
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.