CVE-2024-41927: falha de média gravidade em IDEC Corporation FC6A Series MICROSmart…
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar FC6A Series MICROSmart All-in-One CPU module+ Monitorar FC6A Series MICROSmart Plus CPU module
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.6epss 0.2%
Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained. As a result, the program of the PLC may be obtained, and the PLC may be manipulated.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
IDEC Corporation · FC6A Series MICROSmart All-in-One CPU moduleIDEC Corporation · FC6A Series MICROSmart Plus CPU moduleIDEC Corporation · FC6B Series MICROSmart All-in-One CPU moduleIDEC Corporation · FC6B Series MICROSmart Plus CPU moduleIDEC Corporation · FT1A Series SmartAXIS Pro/Lite