NetSight
IP …
critical9.8

CVE-2021-37401

An attacker may obtain the user credentials from file servers, backup repositories, or ZLD files saved in SD cards.

Impact

An attacker may obtain the user credentials from file servers, backup repositories, or ZLD files saved in SD cards. As a result, the PLC user program may be uploaded, altered, and/or downloaded.

Affected products

VendorProductAffected versions
IdecData File Manager
through 2.12.1
IdecWindedit
through 1.3.1
IdecWindldr
through 8.19.1
IdecMicrosmart Plus Fc6b Firmware
through 2.31
IdecMicrosmart Plus Fc6a Firmware
through 1.91
IdecMicrosmart Fc6b Firmware
through 2.31
IdecMicrosmart Fc6a Firmware
through 2.32
IdecFt1a Smartaxix Pro Firmware
through 2.31
IdecFt1a Smartaxix Lite Firmware
through 2.31

Weakness classification

CWE-522

References