Lucene search
JpcertCVELIST:CVE-2024-41716HistorySep 04, 2024 - 12:34 a.m.
CVE-2024-41716
2024-09-0400:34:12
jpcert
www.cve.org
4
cleartext storage
sensitive information
windldr
windo/i-nv4
user credentials
plc
operator interfaces
exploited vulnerability
manipulate
hijacking
EPSS
0.001
Percentile
20.2%
Cleartext storage of sensitive information vulnerability exists in WindLDR and WindO/I-NV4. If this vulnerability is exploited, an attacker who obtained the product’s project file may obtain user credentials of the PLC or Operator Interfaces. As a result, an attacker may be able to manipulate and/or suspend the PLC and Operator Interfaces by accessing or hijacking them.
CNA Affected
[
{
"vendor": "IDEC Corporation",
"product": "WindLDR",
"versions": [
{
"version": "Ver.9.1.0 and earlier",
"status": "affected"
}
]
},
{
"vendor": "IDEC Corporation",
"product": "WindO/I-NV4",
"versions": [
{
"version": "Ver.3.0.1",
"status": "affected"
}
]
}
]Related
ics
ics
IDEC CORPORATION WindLDR and WindO/I-NV4
2024-09-19 12:00:00
vulnrichment
vulnrichment
CVE-2024-41716
2024-09-04 00:34:12
cve
cve
CVE-2024-41716
2024-09-04 01:15:11
nvd
nvd
CVE-2024-41716
2024-09-04 01:15:11
jvn
jvn