The vulnerability enables an unauthenticated network client to access the internal data publisher within openPDC, which by default accepts connections without authentication due to a weakness identified as CWE-306 (Missing Authentication for Critical Function). This privileged interface releases the complete device and measurement topology to any connected attacker, potentially revealing critical infrastructure details and aiding subsequent attacks.

The affected products are Grid Protection Alliance’s openPDC and openHistorian, including the openPDC Docker. Any installation that has not modified the default binding of the internal data publisher to the local loopback interface remains vulnerable.

With a CVSS base score of 8.7 the flaw is considered High severity. The EPSS score is not listed, so exploitation likelihood cannot be precisely quantified, yet the lack of authentication makes exploitation trivial for any network attacker who can reach the openPDC service. The vulnerability is not listed in the CISA KEV catalog. The attack vector is network‑based, requiring that the exposed interface be reachable from the attacker’s host.