CVE-2024-41716 — IDEC Corporation / WindLDR

Description (CNA)

Cleartext storage of sensitive information vulnerability exists in WindLDR and WindO/I-NV4. If this vulnerability is exploited, an attacker who obtained the product's project file may obtain user credentials of the PLC or Operator Interfaces. As a result, an attacker may be able to manipulate and/or suspend the PLC and Operator Interfaces by accessing or hijacking them.

Affected (CNA)

Vendor / product	Versions
IDEC Corporation / WindLDR	affected Ver.9.1.0 and earlier
IDEC Corporation / WindO/I-NV4	affected Ver.3.0.1

CWE

No CWE identifiers supplied.

References

https://us.idec.com/media/24-RD-0219-EN.pdf
https://jvn.jp/en/jp/JVN08342147/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.