ICS OpenPLC Runtime edit-user Authenticated Arbitrary File Upload Vulnerability (CVE-2025-54962)

Rule ID

1237532

Severity

Medium

Description

edit-user in webserver in OpenPLC Runtime 3 through 9cd8f1b allows authenticated users to upload arbitrary files (such as .html or .svg), and these are then publicly accessible under the /static URI.

Impact

Remote code execution

Recommendation

Update vendor's patch.

IPS Category

ICS threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Allow

References

Keywords

N/A