Vendors / IDEC Corporation Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 3
Exploited now IDEC Corporation records in CISA KEV No IDEC Corporation vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
An attacker may obtain the user credentials from file servers, backup repositories, or ZLD files saved in SD cards.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01384 · Published 2021-12-28 · No fix listed CWE-522
Priority MEDIUM 45
An attacker may obtain the user credentials from the communication between the PLC and the software.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01384 · Published 2021-12-28 · No fix listed CWE-522
Priority LOW 36
Cleartext storage of sensitive information vulnerability exists in WindLDR and WindO/I-NV4.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00447 · Published 2024-09-04 · No fix listed CWE-312
Priority LOW 34
Plaintext storage of a password vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier, WindLDR v8.19.1 and earlier, WindEDIT…
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00608 · Published 2021-12-24 · No fix listed CWE-312
Priority LOW 33
Unprotected transport of credentials vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier, WindLDR v8.19.1 and earlier, Wind…
CVSS 3.1 HIGH 7.6· Adjacent network · No auth · No interaction · EPSS 0.00403 · Published 2021-12-24 · No fix listed CWE-522
Open these records in search → All records by CVSS severity
2 3 1 0 0
THREATIST.IORead the docs