ICSA-22-006-03

icsaUScisa_csaf_ot

IDEC PLCs

view advisory published 2022-01-06

Successful exploitation of these vulnerabilities could allow an attacker to upload, alter, and/or download the PLC user program. An attacker could also access the PLC web server and hijack the controllers, resulting in the manipulation and/or suspension of the PLC output.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2021-37401UScritical9.8—
An attacker may obtain the user credentials from file servers, backup repositories, or ZLD files saved in SD cards. As a result, the PLC user program may be uploaded, altered, and/…
CVE-2021-37400UScritical9.8—
An attacker may obtain the user credentials from the communication between the PLC and the software. As a result, the PLC user program may be uploaded, altered, and/or downloaded.
CVE-2021-20827UShigh7.5OT elevated—
Plaintext storage of a password vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier…
CVE-2021-20826UShigh7.6—
Unprotected transport of credentials vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and ea…
02

references

External citations — patches, advisories, analysis.

03

remediations (72)

  • MitigationData File Manager

    Data File Manager: v2.13.0 and later

  • MitigationData File Manager

    Data File Manager: v2.13.0 and later

  • MitigationData File Manager

    Data File Manager: v2.13.0 and later

  • MitigationData File Manager

    Data File Manager: v2.13.0 and later

  • MitigationFC6A MICROSmart All-in-One CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6A MICROSmart All-in-One CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6A MICROSmart All-in-One CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6A MICROSmart All-in-One CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6A MICROSmart Plus CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6A MICROSmart Plus CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6A MICROSmart Plus CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6A MICROSmart Plus CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6B MICROSmart All-in-One CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6B MICROSmart All-in-One CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6B MICROSmart All-in-One CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6B MICROSmart All-in-One CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6B MICROSmart Plus CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6B MICROSmart Plus CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6B MICROSmart Plus CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6B MICROSmart Plus CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFT1A Controller SmartAXIS Pro/Lite

    Data File Manager: v2.13.0 and later

  • MitigationFT1A Controller SmartAXIS Pro/Lite

    Data File Manager: v2.13.0 and later

  • MitigationFT1A Controller SmartAXIS Pro/Lite

    Data File Manager: v2.13.0 and later

  • MitigationFT1A Controller SmartAXIS Pro/Lite

    Data File Manager: v2.13.0 and later

  • MitigationWindEDIT

    Data File Manager: v2.13.0 and later

  • MitigationWindEDIT

    Data File Manager: v2.13.0 and later

  • MitigationWindEDIT

    Data File Manager: v2.13.0 and later

  • MitigationWindEDIT

    Data File Manager: v2.13.0 and later

  • MitigationWindEDIT Lite

    Data File Manager: v2.13.0 and later

  • MitigationWindEDIT Lite

    Data File Manager: v2.13.0 and later

  • MitigationWindEDIT Lite

    Data File Manager: v2.13.0 and later

  • MitigationWindEDIT Lite

    Data File Manager: v2.13.0 and later

  • MitigationWindLDR

    Data File Manager: v2.13.0 and later

  • MitigationWindLDR

    Data File Manager: v2.13.0 and later

  • MitigationWindLDR

    Data File Manager: v2.13.0 and later

  • MitigationWindLDR

    Data File Manager: v2.13.0 and later

  • FixedData File Manager

    WindLDR: v8.20.0 and later

  • FixedData File Manager

    WindLDR: v8.20.0 and later

  • FixedData File Manager

    WindLDR: v8.20.0 and later

  • FixedData File Manager

    WindLDR: v8.20.0 and later

  • FixedFC6A MICROSmart All-in-One CPU Module

    WindLDR: v8.20.0 and later

  • FixedFC6A MICROSmart All-in-One CPU Module

    WindLDR: v8.20.0 and later

  • FixedFC6A MICROSmart All-in-One CPU Module

    WindLDR: v8.20.0 and later

  • FixedFC6A MICROSmart All-in-One CPU Module

    WindLDR: v8.20.0 and later

  • FixedFC6A MICROSmart Plus CPU Module

    WindLDR: v8.20.0 and later

  • FixedFC6A MICROSmart Plus CPU Module

    WindLDR: v8.20.0 and later

  • FixedFC6A MICROSmart Plus CPU Module

    WindLDR: v8.20.0 and later

  • FixedFC6A MICROSmart Plus CPU Module

    WindLDR: v8.20.0 and later

  • FixedFC6B MICROSmart All-in-One CPU Module

    WindLDR: v8.20.0 and later

  • FixedFC6B MICROSmart All-in-One CPU Module

    WindLDR: v8.20.0 and later

  • FixedFC6B MICROSmart All-in-One CPU Module

    WindLDR: v8.20.0 and later

  • FixedFC6B MICROSmart All-in-One CPU Module

    WindLDR: v8.20.0 and later

  • FixedFC6B MICROSmart Plus CPU Module

    WindLDR: v8.20.0 and later

  • FixedFC6B MICROSmart Plus CPU Module

    WindLDR: v8.20.0 and later

  • FixedFC6B MICROSmart Plus CPU Module

    WindLDR: v8.20.0 and later

  • FixedFC6B MICROSmart Plus CPU Module

    WindLDR: v8.20.0 and later

  • FixedFT1A Controller SmartAXIS Pro/Lite

    WindLDR: v8.20.0 and later

  • FixedFT1A Controller SmartAXIS Pro/Lite

    WindLDR: v8.20.0 and later

  • FixedFT1A Controller SmartAXIS Pro/Lite

    WindLDR: v8.20.0 and later

  • FixedFT1A Controller SmartAXIS Pro/Lite

    WindLDR: v8.20.0 and later

  • FixedWindEDIT

    WindLDR: v8.20.0 and later

  • FixedWindEDIT

    WindLDR: v8.20.0 and later

  • FixedWindEDIT

    WindLDR: v8.20.0 and later

  • FixedWindEDIT

    WindLDR: v8.20.0 and later

  • FixedWindEDIT Lite

    WindLDR: v8.20.0 and later

  • FixedWindEDIT Lite

    WindLDR: v8.20.0 and later

  • FixedWindEDIT Lite

    WindLDR: v8.20.0 and later

  • FixedWindEDIT Lite

    WindLDR: v8.20.0 and later

  • FixedWindLDR

    WindLDR: v8.20.0 and later

  • FixedWindLDR

    WindLDR: v8.20.0 and later

  • FixedWindLDR

    WindLDR: v8.20.0 and later

  • FixedWindLDR

    WindLDR: v8.20.0 and later

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan