The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and retrieve the complete device and measurement topology of the system.
Fix
Vendor advisories in the News 1
- Grid Protection Alliance openPDC and openHistorian CISA ICS Advisories · 2026-10-08
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
In the news 1
Change history 1
- First seenCVSS 8.7NVD modified 2026-10-11 17:17
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.