CVE-2021-37400 : faille critique idec data file manager (CVSS 9.8)

An attacker may obtain the user credentials from the communication between the PLC and the software. As a result, the PLC user program may be uploaded, altered, and/or downloaded.

Sévérité

Critique (CVSS 9.8)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

28 déc. 2021

Dernière mise à jour

17 juin 2026

• idec data file manager
• idec windedit
• idec windldr
• idec microsmart plus fc6b firmware
• idec microsmart plus fc6a firmware
• idec microsmart fc6b firmware
• idec microsmart fc6a firmware
• idec ft1a smartaxix pro firmware
• idec ft1a smartaxix lite firmware

• Fiche CVE-2021-37400 sur le NVD (NIST)
• jvn.jp/en/vu/JVNVU92279973/
• us.idec.com/idec…
• us.idec.com/idec…
• idec.com/home/lp/pdf/2021-12-24-PLC.pdf