{"uuid": "c266efb6-1d88-40e1-b755-250fcf59dd77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31886", "type": "published-proof-of-concept", "source": "https://t.me/pphm_HackerNews/2955", "content": "\ud83d\udd34 Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars\n\nResearchers at Forescout\u2019s Vedere Labs used Anthropic\u2019s Claude to port a working remote code execution (RCE) exploit from one WAGO programmable logic controller (PLC) to another. They succeeded but only after extensive researcher oversight, several hours of dedicated work, and hundreds of dollars in API costs.\n\nThe starting point was a previously developed exploit for the WAGO 750-852 PLC, based on CVE-2021-31886, a pre-authentication buffer overflow in the Nucleus FTP server that allows an unauthenticated attacker to execute arbitrary ARM shellcode on the targeted PLC.", "creation_timestamp": "2026-09-06T00:00:13.341179Z"}