Vulnerability CVE-2024-41716


Published: 2024-09-04

Description:
Cleartext storage of sensitive information vulnerability exists in WindLDR and WindO/I-NV4. If this vulnerability is exploited, an attacker who obtained the product's project file may obtain user credentials of the PLC or Operator Interfaces. As a result, an attacker may be able to manipulate and/or suspend the PLC and Operator Interfaces by accessing or hijacking them.

 References:
https://us.idec.com/media/24-RD-0219-EN.pdf
https://jvn.jp/en/jp/JVN08342147/

Copyright 2026, cxsecurity.com

 

Back to Top