The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this interface and exchange data with it.
Fix
Vendor advisories in the News 1
- Grid Protection Alliance openPDC and openHistorian CISA ICS Advisories · 2026-10-08
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
In the news 1
Change history 1
- First seenCVSS 6.9NVD modified 2026-10-11 17:17
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.