CVE-2025-46613 - CVE House

Status published High CVE-2025-46613

OpenPLC 3 through 64f9c11 has server.cpp Memory Corruption because a...

7.5 CVSS

Vulnerability Description

OpenPLC 3 through 64f9c11 has server.cpp Memory Corruption because a thread may access handleConnections arguments after the parent stack frame becomes unavailable.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-46613

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://github.com/thiagoralves/OpenPLC_v3/issues/273

More from openplcproject

View All →

CVE-2021-3351

OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the...

Medium 5.4

CVE-2021-31630

Command Injection in Open PLC Webserver v3 allows remote attackers...

High 8.8

CVE-2018-20818

A buffer overflow vulnerability was discovered in the OpenPLC controller,...

Critical 9.8

Affected Vendor

openplcproject

View all reports →

Affected Software

OpenPLC

Vulnerable Versions:

Timeline

Official Publish: April 25th, 2025

Last Modified: April 25th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H

Weaknesses (CWE)

CWE-362

MITRE ATT&CK TTPs

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1574 Hijack Execution Flow

Persistence

T1565 Data Manipulation

Impact

T1499 Endpoint Denial of Service