CyberRota Analysis
AI-GeneratedFUXA web-based Process Visualization software versions 1.2.11 to 1.3.1 are vulnerable to unauthenticated remote code execution, allowing attackers to gain root access regardless of security configurations. Organizations using these versions should prioritize patching to version 1.3.1 to mitigate the risk of exploitation. This vulnerability poses a significant threat to any entity relying on FUXA for SCADA/HMI operations.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Versions 1.2.11 until 1.3.1 allow an unauthenticated remote attacker to achieve Full Remote Code Execution (RCE) as root. The exploit succeeds even when the platform is configured in its most secure state (Secure Mode Enabled and Node-RED Secure Auth Enabled). Version 1.3.1 fixes the issue.