← Database
CVE-2024-41927
MEDIUM
CVSS: 4.6
Published: 2024-09-04
Modified: 2026-06-17
Description
Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained. As a result, the program of the PLC may be obtained, and the PLC may be manipulated.
Affected Platforms
Idec Kit-Fc6A-40-Rc FirmwareIdec Kit-Fc6A-D16P-Hg2G-5TtIdec Kit-Fc6A-16-Rc-Hg2G-5TnIdec Kit-Fc6A-16-Ra FirmwareIdec Ft1A-H24RaIdec Kit-Fc6A-16-KcIdec Kit-Fc6A-D16P-Hg2G-5Tn FirmwareIdec Ft1A-H12Rc FirmwareIdec Kit-Smart-40-Bac-RIdec Kit-Fc6A-40-Pc Firmware
Weakness Type
CWE-319, CWE-319, CWE-319