IDEC Corporation
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| IDEC PLC | 2 | – | Dec 24, 2021 |
| FC6A Series MICROSmart Plus CPU module | 1 | – | Sep 4, 2024 |
| FC6B Series MICROSmart All-in-One CPU module | 1 | – | Sep 4, 2024 |
| FC6B Series MICROSmart Plus CPU module | 1 | – | Sep 4, 2024 |
| FT1A Series SmartAXIS Pro/Lite | 1 | – | Sep 4, 2024 |
| WindLDR | 1 | – | Sep 4, 2024 |
| FC6A Series MICROSmart All-in-One CPU module | 1 | – | Sep 4, 2024 |
| WindO/I-NV4 | 1 | – | Sep 4, 2024 |
Exploited and recent CVEs
- CVE-2024-41927 Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained 0.2%
- CVE-2024-41927 Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained 0.2%
- CVE-2024-41927 Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained 0.2%
- CVE-2024-41927 Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained 0.2%
- CVE-2024-41927 Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained 0.2%
- CVE-2024-41716 Cleartext storage of sensitive information vulnerability exists in WindLDR and WindO/I-NV4. If this vulnerability is exploited, an attacker who obtained the product's project file may obtain user cred 0.4%
- CVE-2024-41716 Cleartext storage of sensitive information vulnerability exists in WindLDR and WindO/I-NV4. If this vulnerability is exploited, an attacker who obtained the product's project file may obtain user cred 0.4%
- CVE-2021-20827 Plaintext storage of a password vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier, WindLDR v8.19.1 an 0.6%
- CVE-2021-20826 Unprotected transport of credentials vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier, WindLDR v8.19 0.4%