medium4.6
CVE-2024-41927
Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs.
Impact
Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained. As a result, the program of the PLC may be obtained, and the PLC may be manipulated.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Idec | Kit-Fc6a-24-Kc Firmware | through 2.60 |
| Idec | Kit-Fc6a-24-Pc Firmware | through 2.60 |
| Idec | Kit-Fc6a-24-Ra Firmware | through 2.60 |
| Idec | Kit-Fc6a-24-Ra-Hg1g Firmware | through 2.60 |
| Idec | Kit-Fc6a-24-Ra-Hg2g-5tn Firmware | through 2.60 |
| Idec | Kit-Fc6a-24-Ra-Hg2g-5tt Firmware | through 2.60 |
| Idec | Kit-Fc6a-24-Rc-Hg1g Firmware | through 2.60 |
| Idec | Kit-Fc6a-24-Rc Firmware | through 2.60 |
| Idec | Kit-Fc6a-24-Rc-Hg2g-5tn Firmware | through 2.60 |
| Idec | Kit-Fc6a-24-Rc-Hg2g-5tt Firmware | through 2.60 |
| Idec | Kit-Fc6a-C24r-Hg2g-Vhp Firmware | through 2.60 |
| Idec | Kit-Fc6a-C24r-Hg3g-V8hp Firmware | through 2.60 |