Executive brief
ScadaBR is an open-source SCADA (supervisory control and data acquisition) system used to monitor and control industrial processes. A vulnerability in the project export function allows authenticated attackers to extract sensitive project data without proper authorization checks. While the import function was protected with admin-level access controls, the export function was left unprotected, enabling unauthorized information disclosure.
Technical details
The EmportDwr.createExportJSON function in the /ScadaBR/export_project.htm endpoint fails to enforce access controls, allowing information disclosure through project export. The vulnerability is an authorization bypass where admin-level permission checks were implemented for import but not for export. Attackers with network access can trigger the export function to retrieve sensitive configuration and operational data; a patch is available in version 1.2.0.
Affected products
- ScadaBR ScadaBR up to 1.1
Timeline
- 2026-09-21: disclosed
- 2026-09-21: patched: Fixed in version 1.2.0 (commit c852b49)