Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2024-41927

Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credent

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained. As a result, the program of the PLC may be obtained, and the PLC may be manipulated.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IDEC Corporation FC6A Series MICROSmart All-in-One CPU module

  • Ver.2.60 and earlieraffected

IDEC Corporation FC6B Series MICROSmart All-in-One CPU module

  • Ver.2.60 and earlieraffected

IDEC Corporation FC6A Series MICROSmart Plus CPU module

  • Ver.2.40 and earlieraffected

IDEC Corporation FC6B Series MICROSmart Plus CPU module

  • Ver.2.60 and earlieraffected

IDEC Corporation FT1A Series SmartAXIS Pro/Lite

  • Ver.2.41 and earlieraffected

References