Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-28747

ifm: Use of Hard-coded Credentials

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ifm Smart PLC AC14xx Firmware

Default version status: unaffected

  • 0 to ≤ V4.3.17affected

ifm Smart PLC AC4xxS Firmware

Default version status: unaffected

  • 0 to ≤ V4.3.17affected

References