← Database

CVE-2021-37401

CRITICAL CVSS: 9.8 Published: 2021-12-28 Modified: 2026-06-17

Description

An attacker may obtain the user credentials from file servers, backup repositories, or ZLD files saved in SD cards. As a result, the PLC user program may be uploaded, altered, and/or downloaded.

Affected Platforms

Idec Ft1A Smartaxix LiteIdec Microsmart Fc6A FirmwareIdec Ft1A Smartaxix ProIdec Ft1A Smartaxix Lite FirmwareIdec WindldrIdec Data File ManagerIdec Microsmart Fc6B FirmwareIdec Microsmart Plus Fc6A FirmwareIdec Microsmart Fc6BIdec Microsmart Plus Fc6B Firmware

Weakness Type

CWE-522

References