ICSA-22-006-03

icsaUScisa_csaf_ot

IDEC PLCs

Advisory ansehen veröffentlicht 2022-01-06

Successful exploitation of these vulnerabilities could allow an attacker to upload, alter, and/or download the PLC user program. An attacker could also access the PLC web server and hijack the controllers, resulting in the manipulation and/or suspension of the PLC output.

01

beschreibt (4)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-37401UScritical9.8—
An attacker may obtain the user credentials from file servers, backup repositories, or ZLD files saved in SD cards. As a result, the PLC user program may be uploaded, altered, and/…
CVE-2021-37400UScritical9.8—
An attacker may obtain the user credentials from the communication between the PLC and the software. As a result, the PLC user program may be uploaded, altered, and/or downloaded.
CVE-2021-20827UShigh7.5OT erhöht—
Plaintext storage of a password vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier…
CVE-2021-20826UShigh7.6—
Unprotected transport of credentials vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and ea…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (72)

  • MitigationData File Manager

    Data File Manager: v2.13.0 and later

  • MitigationData File Manager

    Data File Manager: v2.13.0 and later

  • MitigationData File Manager

    Data File Manager: v2.13.0 and later

  • MitigationData File Manager

    Data File Manager: v2.13.0 and later

  • MitigationFC6A MICROSmart All-in-One CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6A MICROSmart All-in-One CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6A MICROSmart All-in-One CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6A MICROSmart All-in-One CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6A MICROSmart Plus CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6A MICROSmart Plus CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6A MICROSmart Plus CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6A MICROSmart Plus CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6B MICROSmart All-in-One CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6B MICROSmart All-in-One CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6B MICROSmart All-in-One CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6B MICROSmart All-in-One CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6B MICROSmart Plus CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6B MICROSmart Plus CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6B MICROSmart Plus CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFC6B MICROSmart Plus CPU Module

    Data File Manager: v2.13.0 and later

  • MitigationFT1A Controller SmartAXIS Pro/Lite

    Data File Manager: v2.13.0 and later

  • MitigationFT1A Controller SmartAXIS Pro/Lite

    Data File Manager: v2.13.0 and later

  • MitigationFT1A Controller SmartAXIS Pro/Lite

    Data File Manager: v2.13.0 and later

  • MitigationFT1A Controller SmartAXIS Pro/Lite

    Data File Manager: v2.13.0 and later

  • MitigationWindEDIT

    Data File Manager: v2.13.0 and later

  • MitigationWindEDIT

    Data File Manager: v2.13.0 and later

  • MitigationWindEDIT

    Data File Manager: v2.13.0 and later

  • MitigationWindEDIT

    Data File Manager: v2.13.0 and later

  • MitigationWindEDIT Lite

    Data File Manager: v2.13.0 and later

  • MitigationWindEDIT Lite

    Data File Manager: v2.13.0 and later

  • MitigationWindEDIT Lite

    Data File Manager: v2.13.0 and later

  • MitigationWindEDIT Lite

    Data File Manager: v2.13.0 and later

  • MitigationWindLDR

    Data File Manager: v2.13.0 and later

  • MitigationWindLDR

    Data File Manager: v2.13.0 and later

  • MitigationWindLDR

    Data File Manager: v2.13.0 and later

  • MitigationWindLDR

    Data File Manager: v2.13.0 and later

  • BehobenData File Manager

    WindLDR: v8.20.0 and later

  • BehobenData File Manager

    WindLDR: v8.20.0 and later

  • BehobenData File Manager

    WindLDR: v8.20.0 and later

  • BehobenData File Manager

    WindLDR: v8.20.0 and later

  • BehobenFC6A MICROSmart All-in-One CPU Module

    WindLDR: v8.20.0 and later

  • BehobenFC6A MICROSmart All-in-One CPU Module

    WindLDR: v8.20.0 and later

  • BehobenFC6A MICROSmart All-in-One CPU Module

    WindLDR: v8.20.0 and later

  • BehobenFC6A MICROSmart All-in-One CPU Module

    WindLDR: v8.20.0 and later

  • BehobenFC6A MICROSmart Plus CPU Module

    WindLDR: v8.20.0 and later

  • BehobenFC6A MICROSmart Plus CPU Module

    WindLDR: v8.20.0 and later

  • BehobenFC6A MICROSmart Plus CPU Module

    WindLDR: v8.20.0 and later

  • BehobenFC6A MICROSmart Plus CPU Module

    WindLDR: v8.20.0 and later

  • BehobenFC6B MICROSmart All-in-One CPU Module

    WindLDR: v8.20.0 and later

  • BehobenFC6B MICROSmart All-in-One CPU Module

    WindLDR: v8.20.0 and later

  • BehobenFC6B MICROSmart All-in-One CPU Module

    WindLDR: v8.20.0 and later

  • BehobenFC6B MICROSmart All-in-One CPU Module

    WindLDR: v8.20.0 and later

  • BehobenFC6B MICROSmart Plus CPU Module

    WindLDR: v8.20.0 and later

  • BehobenFC6B MICROSmart Plus CPU Module

    WindLDR: v8.20.0 and later

  • BehobenFC6B MICROSmart Plus CPU Module

    WindLDR: v8.20.0 and later

  • BehobenFC6B MICROSmart Plus CPU Module

    WindLDR: v8.20.0 and later

  • BehobenFT1A Controller SmartAXIS Pro/Lite

    WindLDR: v8.20.0 and later

  • BehobenFT1A Controller SmartAXIS Pro/Lite

    WindLDR: v8.20.0 and later

  • BehobenFT1A Controller SmartAXIS Pro/Lite

    WindLDR: v8.20.0 and later

  • BehobenFT1A Controller SmartAXIS Pro/Lite

    WindLDR: v8.20.0 and later

  • BehobenWindEDIT

    WindLDR: v8.20.0 and later

  • BehobenWindEDIT

    WindLDR: v8.20.0 and later

  • BehobenWindEDIT

    WindLDR: v8.20.0 and later

  • BehobenWindEDIT

    WindLDR: v8.20.0 and later

  • BehobenWindEDIT Lite

    WindLDR: v8.20.0 and later

  • BehobenWindEDIT Lite

    WindLDR: v8.20.0 and later

  • BehobenWindEDIT Lite

    WindLDR: v8.20.0 and later

  • BehobenWindEDIT Lite

    WindLDR: v8.20.0 and later

  • BehobenWindLDR

    WindLDR: v8.20.0 and later

  • BehobenWindLDR

    WindLDR: v8.20.0 and later

  • BehobenWindLDR

    WindLDR: v8.20.0 and later

  • BehobenWindLDR

    WindLDR: v8.20.0 and later

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan