CVE-2025-34226

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-34226", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2025-04-15T19:15:22.574Z", "datePublished": "2025-10-03T15:36:03.516Z", "dateUpdated": "2026-11-08T14:00:17.815Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-11-08T14:00:17.815Z"}, "title": "OpenPLC Runtime v3 Persistent DoS", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>OpenPLC Runtime v3 contains an input validation flaw in the <code>/upload-program-action</code> endpoint: the <code>epoch_time</code> field supplied during program uploads is not validated and can be crafted to induce corruption of the programs database. After a successful malformed upload the runtime continues to operate until a restart; on restart the runtime can fail to start because of corrupted database entries, resulting in persistent denial of service requiring complete rebase of the product to recover. This vulnerability was remediated by commit 095ee09.</p>"}], "value": "OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epoch_time field supplied during program uploads is not validated and can be crafted to induce corruption of the programs database. After a successful malformed upload the runtime continues to operate until a restart; on restart the runtime can fail to start because of corrupted database entries, resulting in persistent denial of service requiring complete rebase of the product to recover. This vulnerability was remediated by commit 095ee09."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-664", "description": "CWE-664 Improper Control of a Resource Through Its Lifetime", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "affected": [{"defaultStatus": "unaffected", "modules": ["program upload endpoint (/upload-program-action)", "programs database storage"], "product": "OpenPLC Runtime", "vendor": "Autonomy Logic", "versions": [{"lessThan": "095ee09623dd229b64ad3a1db38a901a3772f6fc", "status": "affected", "version": "3.0", "versionType": "git"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:h:openplcproject:openplc_v3:*:*:*:*:*:*:*:*"}]}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 7.1, "baseSeverity": "HIGH", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "references": [{"tags": ["product"], "url": "https://autonomylogic.com/"}, {"tags": ["issue-tracking"], "url": "https://openplc.discussion.community/post/persistant-dos-affecting-openplc-runtime-13722844"}, {"tags": ["issue-tracking", "patch"], "url": "https://github.com/thiagoralves/OpenPLC_v3/pull/297/commits/095ee09623dd229b64ad3a1db38a901a3772f6fc"}, {"tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/openplc-runtime-v3-persistent-denial-of-service"}], "credits": [{"lang": "en", "type": "finder", "value": "Eyodav (Mike G.A)"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Manual-assembly-2025"}}, "adp": [{"references": [{"url": "https://openplc.discussion.community/post/persistant-dos-affecting-openplc-runtime-13722844", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-03T15:47:19.798922Z", "id": "CVE-2025-34226", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-03T15:50:44.794Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-34226", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-03T15:47:19.798922Z"}}}], "references": [{"url": "https://openplc.discussion.community/post/persistant-dos-affecting-openplc-runtime-13722844", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-03T15:47:22.692Z"}}], "cna": {"title": "OpenPLC Runtime v3 Persistent DoS", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Eyodav (Mike G.A)"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Autonomy Logic", "modules": ["program upload endpoint (/upload-program-action)", "programs database storage"], "product": "OpenPLC Runtime", "versions": [{"status": "affected", "version": "3.0", "lessThan": "095ee09623dd229b64ad3a1db38a901a3772f6fc", "versionType": "git"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://autonomylogic.com/", "tags": ["product"]}, {"url": "https://openplc.discussion.community/post/persistant-dos-affecting-openplc-runtime-13722844", "tags": ["issue-tracking"]}, {"url": "https://github.com/thiagoralves/OpenPLC_v3/pull/297/commits/095ee09623dd229b64ad3a1db38a901a3772f6fc", "tags": ["issue-tracking", "patch"]}, {"url": "https://www.vulncheck.com/advisories/openplc-runtime-v3-persistent-denial-of-service", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "Manual-assembly-2025"}, "descriptions": [{"lang": "en", "value": "OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epoch_time field supplied during program uploads is not validated and can be crafted to induce corruption of the programs database. After a successful malformed upload the runtime continues to operate until a restart; on restart the runtime can fail to start because of corrupted database entries, resulting in persistent denial of service requiring complete rebase of the product to recover. This vulnerability was remediated by commit 095ee09.", "supportingMedia": [{"type": "text/html", "value": "<p>OpenPLC Runtime v3 contains an input validation flaw in the <code>/upload-program-action</code> endpoint: the <code>epoch_time</code> field supplied during program uploads is not validated and can be crafted to induce corruption of the programs database. After a successful malformed upload the runtime continues to operate until a restart; on restart the runtime can fail to start because of corrupted database entries, resulting in persistent denial of service requiring complete rebase of the product to recover. This vulnerability was remediated by commit 095ee09.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-664", "description": "CWE-664 Improper Control of a Resource Through Its Lifetime"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:openplcproject:openplc_v3:*:*:*:*:*:*:*:*", "vulnerable": true}], "operator": "OR"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-11-08T14:00:17.815Z"}}}, "cveMetadata": {"cveId": "CVE-2025-34226", "state": "PUBLISHED", "dateUpdated": "2026-11-08T14:00:17.815Z", "dateReserved": "2025-04-15T19:15:22.574Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2025-10-03T15:36:03.516Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "modules": ["program upload endpoint (/upload-program-action)", "programs database storage"], "product": "OpenPLC Runtime", "vendor": "Autonomy Logic", "versions": [{"lessThan": "095ee09623dd229b64ad3a1db38a901a3772f6fc", "status": "affected", "version": "3.0", "versionType": "git"}]}], "source": "disclosure@vulncheck.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epoch_time field supplied during program uploads is not validated and can be crafted to induce corruption of the programs database. After a successful malformed upload the runtime continues to operate until a restart; on restart the runtime can fail to start because of corrupted database entries, resulting in persistent denial of service requiring complete rebase of the product to recover. This vulnerability was remediated by commit 095ee09."}, {"lang": "es", "value": "OpenPLC Runtime v3 contiene una falla de validaci\u00f3n de entrada en el endpoint /upload-program-action: el campo epoch_time proporcionado durante las cargas de programas no se valida y puede ser manipulado para inducir la corrupci\u00f3n de la base de datos de programas. Despu\u00e9s de una carga malformada exitosa, el runtime contin\u00faa operando hasta un reinicio; al reiniciar, el runtime puede fallar al iniciar debido a entradas de base de datos corruptas, lo que resulta en una denegaci\u00f3n de servicio persistente que requiere la rebase completa del producto para recuperarse. Esta vulnerabilidad fue remediada por el commit 095ee09."}], "id": "CVE-2025-34226", "lastModified": "2026-10-08T22:10:00.563", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-34226", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-10-03T15:47:19.798922Z", "version": "2.0.3"}}]}, "published": "2025-10-03T16:16:17.243", "references": [{"source": "disclosure@vulncheck.com", "url": "https://autonomylogic.com/"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/thiagoralves/OpenPLC_v3/pull/297/commits/095ee09623dd229b64ad3a1db38a901a3772f6fc"}, {"source": "disclosure@vulncheck.com", "url": "https://openplc.discussion.community/post/persistant-dos-affecting-openplc-runtime-13722844"}, {"source": "disclosure@vulncheck.com", "url": "https://www.vulncheck.com/advisories/openplc-runtime-v3-persistent-denial-of-service"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://openplc.discussion.community/post/persistant-dos-affecting-openplc-runtime-13722844"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-664"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{}

{"created": "2025-10-06T14:43:11.478631+00:00", "updated": "2025-10-06T14:43:11.478688+00:00", "vendors": ["openplcproject", "openplcproject$PRODUCT$openplc", "openplcproject$PRODUCT$openplc_v3"]}