CVE-2024-41927
MEDIUM EPSS 4.8%
Published Sep 4, 20241y ago · Modified Jun 17, 20261w ago
4.6 CVSS 3.1
Published Sep 4, 2024 1y ago
Last Modified Jun 17, 2026 1w ago
Description
Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained. As a result, the program of the PLC may be obtained, and the PLC may be manipulated.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Attack Vector Physical
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity None
Availability None
Threat Intelligence
EPSS Exploit Probability
4.8% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-319
Affected Products 188
| Vendor | Product | Version | Range |
|---|---|---|---|
| idec | kit-fc6a-24-kc_firmware | * | ≤2.60 |
| idec | kit-fc6a-24-kc | * | any |
| idec | kit-fc6a-24-pc_firmware | * | ≤2.60 |
| idec | kit-fc6a-24-pc | * | any |
| idec | kit-fc6a-24-ra_firmware | * | ≤2.60 |
| idec | kit-fc6a-24-ra | * | any |
| idec | kit-fc6a-24-ra-hg1g_firmware | * | ≤2.60 |
| idec | kit-fc6a-24-ra-hg1g | * | any |
| idec | kit-fc6a-24-ra-hg2g-5tn_firmware | * | ≤2.60 |
| idec | kit-fc6a-24-ra-hg2g-5tn | * | any |
| idec | kit-fc6a-24-ra-hg2g-5tt_firmware | * | ≤2.60 |
| idec | kit-fc6a-24-ra-hg2g-5tt | * | any |
| idec | kit-fc6a-24-rc-hg1g_firmware | * | ≤2.60 |
| idec | kit-fc6a-24-rc-hg1g | * | any |
| idec | kit-fc6a-24-rc_firmware | * | ≤2.60 |
| idec | kit-fc6a-24-rc | * | any |
| idec | kit-fc6a-24-rc-hg2g-5tn_firmware | * | ≤2.60 |
| idec | kit-fc6a-24-rc-hg2g-5tn | * | any |
| idec | kit-fc6a-24-rc-hg2g-5tt_firmware | * | ≤2.60 |
| idec | kit-fc6a-24-rc-hg2g-5tt | * | any |
| idec | kit-fc6a-c24r-hg2g-vhp_firmware | * | ≤2.60 |
| idec | kit-fc6a-c24r-hg2g-vhp | * | any |
| idec | kit-fc6a-c24r-hg3g-v8hp_firmware | * | ≤2.60 |
| idec | kit-fc6a-c24r-hg3g-v8hp | * | any |
| idec | kit-fc6a-c24r-hg3g-vahp_firmware | * | ≤2.60 |
| idec | kit-fc6a-c24r-hg3g-vahp | * | any |
| idec | kit-fc6a-c24r-hg4g-vhp_firmware | * | ≤2.60 |
| idec | kit-fc6a-c24r-hg4g-vhp | * | any |
| idec | kit-fc6a-c24r-hg5g-vhp_firmware | * | ≤2.60 |
| idec | kit-fc6a-c24r-hg5g-vhp | * | any |
| idec | kit-fc6a-16-pc_firmware | * | ≤2.6 |
| idec | kit-fc6a-16-pc | * | any |
| idec | kit-fc6a-16-ra_firmware | * | ≤2.60 |
| idec | kit-fc6a-16-ra | * | any |
| idec | kit-fc6a-16-kc_firmware | * | ≤2.60 |
| idec | kit-fc6a-16-kc | * | any |
| idec | kit-fc6a-16-ra-hg1g_firmware | * | ≤2.60 |
| idec | kit-fc6a-16-ra-hg1g | * | any |
| idec | kit-fc6a-16-ra-hg2g-5tn_firmware | * | ≤2.60 |
| idec | kit-fc6a-16-ra-hg2g-5tn | * | any |
| idec | kit-fc6a-16-ra-hg2g-5tt_firmware | * | ≤2.60 |
| idec | kit-fc6a-16-ra-hg2g-5tt | * | any |
| idec | kit-fc6a-16-rc_firmware | * | ≤2.60 |
| idec | kit-fc6a-16-rc | * | any |
| idec | kit-fc6a-16-rc-hg2g-5tn_firmware | * | ≤2.60 |
| idec | kit-fc6a-16-rc-hg2g-5tn | * | any |
| idec | kit-fc6a-16-rc-hg1g_firmware | * | ≤2.60 |
| idec | kit-fc6a-16-rc-hg1g | * | any |
| idec | kit-fc6a-16-rc-hg2g-5tt_firmware | * | ≤2.60 |
| idec | kit-fc6a-16-rc-hg2g-5tt | * | any |
| idec | kit-fc6a-16-kd_firmware | * | ≤2.60 |
| idec | kit-fc6a-16-kd | * | any |
| idec | kit-fc6a-16-pd_firmware | * | ≤2.60 |
| idec | kit-fc6a-16-pd | * | any |
| idec | kit-fc6a-c16r-hg2g-vhp_firmware | * | ≤2.60 |
| idec | kit-fc6a-c16r-hg2g-vhp | * | any |
| idec | kit-fc6a-c16r-hg3g-v8hp_firmware | * | ≤2.60 |
| idec | kit-fc6a-c16r-hg3g-v8hp | * | any |
| idec | kit-fc6a-c16r-hg3g-vahp_firmware | * | ≤2.60 |
| idec | kit-fc6a-c16r-hg3g-vahp | * | any |
| idec | kit-fc6a-c16r-hg5g-vhp_firmware | * | ≤2.60 |
| idec | kit-fc6a-c16r-hg5g-vhp | * | any |
| idec | kit-fc6a-c16r-hg5g-vhp_firmware | * | ≤2.60 |
| idec | kit-fc6a-c16r-hg5g-vhp | * | any |
| idec | kit-fc6a-16-rd_firmware | * | ≤2.60 |
| idec | kit-fc6a-16-rd | * | any |
| idec | kit-fc6a-16-rd_firmware | * | ≤2.60 |
| idec | kit-fc6a-16-rd | * | any |
| idec | kit-fc6a-40-kd_firmware | * | ≤2.60 |
| idec | kit-fc6a-40-kd | * | any |
| idec | kit-fc6a-40-pc_firmware | * | ≤2.60 |
| idec | kit-fc6a-40-pc | * | any |
| idec | kit-fc6a-40-pd_firmware | * | ≤2.60 |
| idec | kit-fc6a-40-pd | * | any |
| idec | kit-fc6a-40-ra_firmware | * | ≤2.60 |
| idec | kit-fc6a-40-ra | * | any |
| idec | kit-fc6a-40-rd_firmware | * | ≤2.60 |
| idec | kit-fc6a-40-rd | * | any |
| idec | kit-fc6a-40-rc_firmware | * | ≤2.60 |
| idec | kit-fc6a-40-rc | * | any |
| idec | kit-fc6a-d16p-hg1g_firmware | * | ≤2.40 |
| idec | kit-fc6a-d16p-hg1g | * | any |
| idec | kit-fc6a-d16p-hg2g-5tn_firmware | * | ≤2.40 |
| idec | kit-fc6a-d16p-hg2g-5tn | * | any |
| idec | kit-fc6a-d16p-hg2g-5tt_firmware | * | ≤2.40 |
| idec | kit-fc6a-d16p-hg2g-5tt | * | any |
| idec | kit-fc6a-d16r-hg2g-5tn_firmware | * | ≤2.40 |
| idec | kit-fc6a-d16r-hg2g-5tn | * | any |
| idec | kit-fc6a-d16r-hg2g-5tt_firmware | * | ≤2.40 |
| idec | kit-fc6a-d16r-hg2g-5tt | * | any |
| idec | kit-fc6a-d16r-hg3g-v8hp_firmware | * | ≤2.40 |
| idec | kit-fc6a-d16r-hg3g-v8hp | * | any |
| idec | kit-fc6a-d16r-hg3g-vahp_firmware | * | ≤2.40 |
| idec | kit-fc6a-d16r-hg3g-vahp | * | any |
| idec | kit-fc6a-d16r-hg4g-vhp_firmware | * | ≤2.40 |
| idec | kit-fc6a-d16r-hg4g-vhp | * | any |
| idec | kit-fc6a-d16r-hg5g-vhp_firmware | * | ≤2.40 |
| idec | kit-fc6a-d16r-hg5g-vhp | * | any |
| idec | kit-fc6a-d16r-hg1g_firmware | * | ≤2.40 |
| idec | kit-fc6a-d16r-hg1g | * | any |
| idec | kit-fc6a-d16r-hg2g-vhp_firmware | * | ≤2.40 |
| idec | kit-fc6a-d16r-hg2g-vhp | * | any |
| idec | kit-fc6a-p16-k_firmware | * | ≤2.40 |
| idec | kit-fc6a-p16-k | * | any |
| idec | kit-fc6a-p16-r_firmware | * | ≤2.40 |
| idec | kit-fc6a-p16-r | * | any |
| idec | kit-fc6a-p16-s_firmware | * | ≤2.40 |
| idec | kit-fc6a-p16-s | * | any |
| idec | ft1a-h12ra_firmware | * | ≤2.41 |
| idec | ft1a-h12ra | * | any |
| idec | ft1a-h24ra_firmware | * | ≤2.41 |
| idec | ft1a-h24ra | * | any |
| idec | ft1a-h24rc_firmware | * | ≤2.41 |
| idec | ft1a-h24rc | * | any |
| idec | ft1a-h12rc_firmware | * | ≤2.41 |
| idec | ft1a-h12rc | * | any |
| idec | ft1a-b12ra_firmware | * | ≤2.41 |
| idec | ft1a-b12ra | * | any |
| idec | ft1a-b24ra_firmware | * | ≤2.41 |
| idec | ft1a-b24ra | * | any |
| idec | kit-smart-12-bac_firmware | * | ≤2.41 |
| idec | kit-smart-12-bac | * | any |
| idec | kit-smart-12-hac_firmware | * | ≤2.41 |
| idec | kit-smart-12-hac | * | any |
| idec | kit-smart-12-bdc_firmware | * | ≤2.41 |
| idec | kit-smart-12-bdc | * | any |
| idec | kit-smart-12-hdc_firmware | * | ≤2.41 |
| idec | kit-smart-12-hdc | * | any |
| idec | kit-smart-24-hac_firmware | * | ≤2.41 |
| idec | kit-smart-24-hac | * | any |
| idec | kit-smart-24-bac_firmware | * | ≤2.41 |
| idec | kit-smart-24-bac | * | any |
| idec | kit-smart-24-bdc_firmware | * | ≤2.41 |
| idec | kit-smart-24-bdc | * | any |
| idec | kit-smart-24-hdc_firmware | * | ≤2.41 |
| idec | kit-smart-24-hdc | * | any |
| idec | kit-smart-40-bac-r_firmware | * | ≤2.41 |
| idec | kit-smart-40-bac-r | * | any |
| idec | kit-smart-40-bdc-rk_firmware | * | ≤2.41 |
| idec | kit-smart-40-bdc-rk | * | any |
| idec | kit-smart-40-bdc-rs_firmware | * | ≤2.41 |
| idec | kit-smart-40-bdc-rs | * | any |
| idec | kit-smart-40-hac-r_firmware | * | ≤2.41 |
| idec | kit-smart-40-hac-r | * | any |
| idec | kit-smart-40-hdc-rk_firmware | * | ≤2.41 |
| idec | kit-smart-40-hdc-rk | * | any |
| idec | kit-smart-48-bac-k_firmware | * | ≤2.41 |
| idec | kit-smart-48-bac-k | * | any |
| idec | kit-smart-40-hdc-rs_firmware | * | ≤2.41 |
| idec | kit-smart-40-hdc-rs | * | any |
| idec | kit-smart-48-bac-s_firmware | * | ≤2.41 |
| idec | kit-smart-48-bac-s | * | any |
| idec | kit-smart-48-bdc-k_firmware | * | ≤2.41 |
| idec | kit-smart-48-bdc-k | * | any |
| idec | kit-smart-48-hac-k_firmware | * | ≤2.41 |
| idec | kit-smart-48-hac-k | * | any |
| idec | kit-smart-48-hac-s_firmware | * | ≤2.41 |
| idec | kit-smart-48-hac-s | * | any |
| idec | kit-smart-48-hac-k_firmware | * | ≤2.41 |
| idec | kit-smart-48-hac-k | * | any |
| idec | kit-smart-48-hdc-s_firmware | * | ≤2.41 |
| idec | kit-smart-48-hdc-s | * | any |
| idec | kit-smart-48-bdc-s_firmware | * | ≤2.41 |
| idec | kit-smart-48-bdc-s | * | any |
| idec | ft1a-pc1_firmware | * | ≤2.41 |
| idec | ft1a-pc1 | * | any |
| idec | ft1a-pc2_firmware | * | ≤2.41 |
| idec | ft1a-pc2 | * | any |
| idec | ft1a-pc3_firmware | * | ≤2.41 |
| idec | ft1a-pc3 | * | any |
| idec | ft1a-pm1_firmware | * | ≤2.41 |
| idec | ft1a-pm1 | * | any |
| idec | ft9z-1a01_firmware | * | ≤2.41 |
| idec | ft9z-1a01 | * | any |
| idec | ft9z-psp1pn05_firmware | * | ≤2.41 |
| idec | ft9z-psp1pn05 | * | any |
| idec | hg9z-xcm2a_firmware | * | ≤2.41 |
| idec | hg9z-xcm2a | * | any |
| idec | kit-fc6a-d32p-hg1g_firmware | * | ≤2.40 |
| idec | kit-fc6a-d32p-hg1g | * | any |
| idec | kit-fc6a-d32p-hg2g-5tn_firmware | * | ≤2.40 |
| idec | kit-fc6a-d32p-hg2g-5tn | * | any |
| idec | kit-fc6a-d32p-hg2g-5tt_firmware | * | ≤2.40 |
| idec | kit-fc6a-d32p-hg2g-5tt | * | any |
| idec | kit-fc6a-p32-k_firmware | * | ≤2.40 |
| idec | kit-fc6a-p32-k | * | any |
| idec | kit-fc6a-p32-s_firmware | * | ≤2.40 |
| idec | kit-fc6a-p32-s | * | any |
References 2
- jvn.jp https://jvn.jp/en/vu/JVNVU96959731/
- us.idec.com https://us.idec.com/media/24-RD-0256-EN-b.pdf
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.