A critical denial of service vulnerability in OpenPLC_V3 allows unauthenticated remote attackers to crash the PLC runtime and halt industrial control logic.

The application lacks a necessary return value in the enipThread function, which triggers an illegal ud2 instruction when the server loop terminates. This flaw can be exploited by an unauthenticated attacker to remotely crash the process and stop all automation or control logic.

Successful exploitation of this vulnerability results in a complete Denial of Service for the affected PLC runtime. Because OpenPLC manages critical automation and control logic, a crash directly impacts operational continuity and system availability. With a CVSS score of 7.1, the risk is classified as High due to the potential for significant operational disruption in industrial environments.

Immediate Action: Users must update OpenPLC_V3 to the version provided in pull request #292 or later, available via the official GitHub repository.

Proactive Monitoring: Security teams should monitor system logs for frequent, unexpected service restarts or sudden termination of the PLC runtime process.

Compensating Controls: Implement network segmentation to restrict access to the PLC management interface to authorized personnel only, thereby reducing the exposure of the vulnerable enipThread function to remote, unauthenticated actors.

Public Exploit Available: Unknown.

Given the potential for severe operational impact, organizations utilizing OpenPLC_V3 in production environments must prioritize the application of the vendor-provided patch. The ability for an unauthenticated remote attacker to halt critical control logic represents a significant risk to industrial operations, necessitating immediate remediation or the implementation of strict network access controls to isolate the affected systems.