CVE-2024-41927
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.6epss 0.2%
exploitation probability
0.2%top 95% of all CVEs
observed exploitation
nono source reports it
Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained. As a result, the program of the PLC may be obtained, and the PLC may be manipulated.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
IDEC Corporation · FC6A Series MICROSmart All-in-One CPU moduleIDEC Corporation · FC6A Series MICROSmart Plus CPU moduleIDEC Corporation · FC6B Series MICROSmart All-in-One CPU moduleIDEC Corporation · FC6B Series MICROSmart Plus CPU moduleIDEC Corporation · FT1A Series SmartAXIS Pro/Lite