CVE-2024-41927
Sept. 19, 2024, 3:10 p.m.
4.6
Medium
Description
Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained. As a result, the program of the PLC may be obtained, and the PLC may be manipulated.
Product(s) Impacted
| Vendor | Product | Versions |
|---|---|---|
| Idec |
|
|
Weaknesses
Common security weaknesses mapped to this vulnerability.
CWE-319
Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
*CPE(s)
Affected systems and software identified for this CVE.
| Type | Vendor | Product | Version | Update | Edition | Language | Software Edition | Target Software | Target Hardware | Other Information |
|---|---|---|---|---|---|---|---|---|---|---|
| o | idec | kit-fc6a-24-kc_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-24-kc | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-24-pc_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-24-pc | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-24-ra_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-24-ra | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-24-ra-hg1g_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-24-ra-hg1g | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-24-ra-hg2g-5tn_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-24-ra-hg2g-5tn | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-24-ra-hg2g-5tt_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-24-ra-hg2g-5tt | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-24-rc-hg1g_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-24-rc-hg1g | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-24-rc_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-24-rc | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-24-rc-hg2g-5tn_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-24-rc-hg2g-5tn | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-24-rc-hg2g-5tt_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-24-rc-hg2g-5tt | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-c24r-hg2g-vhp_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-c24r-hg2g-vhp | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-c24r-hg3g-v8hp_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-c24r-hg3g-v8hp | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-c24r-hg3g-vahp_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-c24r-hg3g-vahp | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-c24r-hg4g-vhp_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-c24r-hg4g-vhp | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-c24r-hg5g-vhp_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-c24r-hg5g-vhp | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-16-pc_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-16-pc | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-16-ra_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-16-ra | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-16-kc_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-16-kc | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-16-ra-hg1g_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-16-ra-hg1g | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-16-ra-hg2g-5tn_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-16-ra-hg2g-5tn | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-16-ra-hg2g-5tt_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-16-ra-hg2g-5tt | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-16-rc_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-16-rc | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-16-rc-hg2g-5tn_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-16-rc-hg2g-5tn | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-16-rc-hg1g_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-16-rc-hg1g | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-16-rc-hg2g-5tt_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-16-rc-hg2g-5tt | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-16-kd_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-16-kd | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-16-pd_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-16-pd | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-c16r-hg2g-vhp_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-c16r-hg2g-vhp | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-c16r-hg3g-v8hp_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-c16r-hg3g-v8hp | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-c16r-hg3g-vahp_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-c16r-hg3g-vahp | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-c16r-hg5g-vhp_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-c16r-hg5g-vhp | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-c16r-hg5g-vhp_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-c16r-hg5g-vhp | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-16-rd_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-16-rd | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-16-rd_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-16-rd | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-40-kd_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-40-kd | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-40-pc_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-40-pc | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-40-pd_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-40-pd | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-40-ra_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-40-ra | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-40-rd_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-40-rd | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-40-rc_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-40-rc | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-d16p-hg1g_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-d16p-hg1g | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-d16p-hg2g-5tn_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-d16p-hg2g-5tn | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-d16p-hg2g-5tt_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-d16p-hg2g-5tt | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-d16r-hg2g-5tn_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-d16r-hg2g-5tn | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-d16r-hg2g-5tt_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-d16r-hg2g-5tt | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-d16r-hg3g-v8hp_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-d16r-hg3g-v8hp | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-d16r-hg3g-vahp_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-d16r-hg3g-vahp | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-d16r-hg4g-vhp_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-d16r-hg4g-vhp | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-d16r-hg5g-vhp_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-d16r-hg5g-vhp | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-d16r-hg1g_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-d16r-hg1g | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-d16r-hg2g-vhp_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-d16r-hg2g-vhp | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-p16-k_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-p16-k | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-p16-r_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-p16-r | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-p16-s_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-p16-s | - | / | / | / | / | / | / | / |
| o | idec | ft1a-h12ra_firmware | / | / | / | / | / | / | / | / |
| h | idec | ft1a-h12ra | - | / | / | / | / | / | / | / |
| o | idec | ft1a-h24ra_firmware | / | / | / | / | / | / | / | / |
| h | idec | ft1a-h24ra | - | / | / | / | / | / | / | / |
| o | idec | ft1a-h24rc_firmware | / | / | / | / | / | / | / | / |
| h | idec | ft1a-h24rc | - | / | / | / | / | / | / | / |
| o | idec | ft1a-h12rc_firmware | / | / | / | / | / | / | / | / |
| h | idec | ft1a-h12rc | - | / | / | / | / | / | / | / |
| o | idec | ft1a-b12ra_firmware | / | / | / | / | / | / | / | / |
| h | idec | ft1a-b12ra | - | / | / | / | / | / | / | / |
| o | idec | ft1a-b24ra_firmware | / | / | / | / | / | / | / | / |
| h | idec | ft1a-b24ra | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-12-bac_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-12-bac | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-12-hac_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-12-hac | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-12-bdc_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-12-bdc | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-12-hdc_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-12-hdc | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-24-hac_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-24-hac | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-24-bac_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-24-bac | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-24-bdc_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-24-bdc | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-24-hdc_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-24-hdc | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-40-bac-r_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-40-bac-r | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-40-bdc-rk_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-40-bdc-rk | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-40-bdc-rs_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-40-bdc-rs | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-40-hac-r_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-40-hac-r | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-40-hdc-rk_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-40-hdc-rk | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-48-bac-k_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-48-bac-k | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-40-hdc-rs_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-40-hdc-rs | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-48-bac-s_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-48-bac-s | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-48-bdc-k_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-48-bdc-k | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-48-hac-k_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-48-hac-k | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-48-hac-s_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-48-hac-s | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-48-hac-k_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-48-hac-k | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-48-hdc-s_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-48-hdc-s | - | / | / | / | / | / | / | / |
| o | idec | kit-smart-48-bdc-s_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-smart-48-bdc-s | - | / | / | / | / | / | / | / |
| o | idec | ft1a-pc1_firmware | / | / | / | / | / | / | / | / |
| h | idec | ft1a-pc1 | - | / | / | / | / | / | / | / |
| o | idec | ft1a-pc2_firmware | / | / | / | / | / | / | / | / |
| h | idec | ft1a-pc2 | - | / | / | / | / | / | / | / |
| o | idec | ft1a-pc3_firmware | / | / | / | / | / | / | / | / |
| h | idec | ft1a-pc3 | - | / | / | / | / | / | / | / |
| o | idec | ft1a-pm1_firmware | / | / | / | / | / | / | / | / |
| h | idec | ft1a-pm1 | - | / | / | / | / | / | / | / |
| o | idec | ft9z-1a01_firmware | / | / | / | / | / | / | / | / |
| h | idec | ft9z-1a01 | - | / | / | / | / | / | / | / |
| o | idec | ft9z-psp1pn05_firmware | / | / | / | / | / | / | / | / |
| h | idec | ft9z-psp1pn05 | - | / | / | / | / | / | / | / |
| o | idec | hg9z-xcm2a_firmware | / | / | / | / | / | / | / | / |
| h | idec | hg9z-xcm2a | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-d32p-hg1g_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-d32p-hg1g | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-d32p-hg2g-5tn_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-d32p-hg2g-5tn | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-d32p-hg2g-5tt_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-d32p-hg2g-5tt | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-p32-k_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-p32-k | - | / | / | / | / | / | / | / |
| o | idec | kit-fc6a-p32-s_firmware | / | / | / | / | / | / | / | / |
| h | idec | kit-fc6a-p32-s | - | / | / | / | / | / | / | / |
Tags
CVSS Score
CVSS Data - 3.1
- Attack Vector: PHYSICAL
- Attack Complexity: LOW
- Privileges Required: NONE
- Scope: UNCHANGED
- Confidentiality Impact: HIGH
- Integrity Impact: NONE
- Availability Impact: NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Timeline
Published: Sept. 4, 2024, 1:15 a.m.
Last Modified: Sept. 19, 2024, 3:10 p.m.
Last Modified: Sept. 19, 2024, 3:10 p.m.
Status : Analyzed
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
vultures@jpcert.or.jp
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.