CVE-2024-41716

2024-09-0400:34:12

jpcert

github.com

cleartext storage

windldr

windo/i-nv4

sensitive information

user credentials

plc

operator interfaces

exploited vulnerability

manipulate

hijacking

AI Score

6.4

Confidence

Low

EPSS

0.001

Percentile

20.2%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Cleartext storage of sensitive information vulnerability exists in WindLDR and WindO/I-NV4. If this vulnerability is exploited, an attacker who obtained the product’s project file may obtain user credentials of the PLC or Operator Interfaces. As a result, an attacker may be able to manipulate and/or suspend the PLC and Operator Interfaces by accessing or hijacking them.