TI-2024-18985 CVE-2024-28751 · GHSA-gxm5-wj75-xvm8
ifm: Hardcoded telnet credentials in Smart PLC
Priority MEDIUM 42
An high privileged remote attacker can enable telnet access that accepts hardcoded credentials.
Vulnerabilities
7 records
TI-2024-18984 CVE-2024-28750 · GHSA-4hgg-wc98-gwc7
ifm: Deleting function in Smart PLC allows command injections
Priority LOW 35
A remote attacker with high privileges may use a deleting file function to inject OS commands.
TI-2024-18983 CVE-2024-28749 · GHSA-x4mg-wjcf-jw72
ifm: Writing file function in Smart PLC allows command injections
Priority LOW 35
A remote attacker with high privileges may use a writing file function to inject OS commands.
TI-2024-18982 CVE-2024-28748 · GHSA-684v-6hw5-q3x5
ifm: Reading function in Smart PLC allows command injections
Priority LOW 35
A remote attacker with high privileges may use a reading file function to inject OS commands.
TI-2024-18981 CVE-2024-28747 · GHSA-qgmw-p96r-8x99
ifm: Use of Hard-coded Credentials
Priority MEDIUM 50
An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges.
TI-2024-05020 CVE-2024-5404 · GHSA-wp73-q74q-5p3q
ifm: moneo prone to weak password recovery mechanism
Priority MEDIUM 50
An unauthenticated remote attacker can change the admin password in a moneo appliance due to weak password recovery mechanism.
TI-2022-03217 CVE-2022-3485 · GHSA-xjvv-99gp-jgrm
Weak Password Recovery in ifm moneo appliance
Priority MEDIUM 51
In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and thus gain full control of the device.