{"id":"CVE-2024-41927","aliases":["EUVD-2024-39278","GHSA-q4gj-2fgv-hpxf"],"status":"published","title":"Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an...","description":"Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained. As a result, the program of the PLC may be obtained, and the PLC may be manipulated.","severity":{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00152,"percentile":0.04462,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-319"],"published":"2024-09-04T00:43:55Z","modified":"2026-06-17T07:48:27Z","products":[{"vendor":"idec","product":"ft1a-b12ra_firmware"},{"vendor":"idec","product":"ft1a-b24ra_firmware"},{"vendor":"idec","product":"ft1a-h12ra_firmware"},{"vendor":"idec","product":"ft1a-h12rc_firmware"},{"vendor":"idec","product":"ft1a-h24ra_firmware"},{"vendor":"idec","product":"ft1a-h24rc_firmware"},{"vendor":"idec","product":"ft1a-pc1_firmware"},{"vendor":"idec","product":"ft1a-pc2_firmware"},{"vendor":"idec","product":"ft1a-pc3_firmware"},{"vendor":"idec","product":"ft1a-pm1_firmware"},{"vendor":"idec","product":"ft9z-1a01_firmware"},{"vendor":"idec","product":"ft9z-psp1pn05_firmware"},{"vendor":"idec","product":"hg9z-xcm2a_firmware"},{"vendor":"idec","product":"kit-fc6a-16-kc_firmware"},{"vendor":"idec","product":"kit-fc6a-16-kd_firmware"},{"vendor":"idec","product":"kit-fc6a-16-pc_firmware"},{"vendor":"idec","product":"kit-fc6a-16-pd_firmware"},{"vendor":"idec","product":"kit-fc6a-16-ra-hg1g_firmware"},{"vendor":"idec","product":"kit-fc6a-16-ra-hg2g-5tn_firmware"},{"vendor":"idec","product":"kit-fc6a-16-ra-hg2g-5tt_firmware"},{"vendor":"idec","product":"kit-fc6a-16-ra_firmware"},{"vendor":"idec","product":"kit-fc6a-16-rc-hg1g_firmware"},{"vendor":"idec","product":"kit-fc6a-16-rc-hg2g-5tn_firmware"},{"vendor":"idec","product":"kit-fc6a-16-rc-hg2g-5tt_firmware"},{"vendor":"idec","product":"kit-fc6a-16-rc_firmware"},{"vendor":"idec","product":"kit-fc6a-16-rd_firmware"},{"vendor":"idec","product":"kit-fc6a-24-kc_firmware"},{"vendor":"idec","product":"kit-fc6a-24-pc_firmware"},{"vendor":"idec","product":"kit-fc6a-24-ra-hg1g_firmware"},{"vendor":"idec","product":"kit-fc6a-24-ra-hg2g-5tn_firmware"},{"vendor":"idec","product":"kit-fc6a-24-ra-hg2g-5tt_firmware"},{"vendor":"idec","product":"kit-fc6a-24-ra_firmware"},{"vendor":"idec","product":"kit-fc6a-24-rc-hg1g_firmware"},{"vendor":"idec","product":"kit-fc6a-24-rc-hg2g-5tn_firmware"},{"vendor":"idec","product":"kit-fc6a-24-rc-hg2g-5tt_firmware"},{"vendor":"idec","product":"kit-fc6a-24-rc_firmware"},{"vendor":"idec","product":"kit-fc6a-40-kd_firmware"},{"vendor":"idec","product":"kit-fc6a-40-pc_firmware"},{"vendor":"idec","product":"kit-fc6a-40-pd_firmware"},{"vendor":"idec","product":"kit-fc6a-40-ra_firmware"},{"vendor":"idec","product":"kit-fc6a-40-rc_firmware"},{"vendor":"idec","product":"kit-fc6a-40-rd_firmware"},{"vendor":"idec","product":"kit-fc6a-c16r-hg2g-vhp_firmware"},{"vendor":"idec","product":"kit-fc6a-c16r-hg3g-v8hp_firmware"},{"vendor":"idec","product":"kit-fc6a-c16r-hg3g-vahp_firmware"},{"vendor":"idec","product":"kit-fc6a-c16r-hg5g-vhp_firmware"},{"vendor":"idec","product":"kit-fc6a-c24r-hg2g-vhp_firmware"},{"vendor":"idec","product":"kit-fc6a-c24r-hg3g-v8hp_firmware"},{"vendor":"idec","product":"kit-fc6a-c24r-hg3g-vahp_firmware"},{"vendor":"idec","product":"kit-fc6a-c24r-hg4g-vhp_firmware"},{"vendor":"idec","product":"kit-fc6a-c24r-hg5g-vhp_firmware"},{"vendor":"idec","product":"kit-fc6a-d16p-hg1g_firmware"},{"vendor":"idec","product":"kit-fc6a-d16p-hg2g-5tn_firmware"},{"vendor":"idec","product":"kit-fc6a-d16p-hg2g-5tt_firmware"},{"vendor":"idec","product":"kit-fc6a-d16r-hg1g_firmware"},{"vendor":"idec","product":"kit-fc6a-d16r-hg2g-5tn_firmware"},{"vendor":"idec","product":"kit-fc6a-d16r-hg2g-5tt_firmware"},{"vendor":"idec","product":"kit-fc6a-d16r-hg2g-vhp_firmware"},{"vendor":"idec","product":"kit-fc6a-d16r-hg3g-v8hp_firmware"},{"vendor":"idec","product":"kit-fc6a-d16r-hg3g-vahp_firmware"},{"vendor":"idec","product":"kit-fc6a-d16r-hg4g-vhp_firmware"},{"vendor":"idec","product":"kit-fc6a-d16r-hg5g-vhp_firmware"},{"vendor":"idec","product":"kit-fc6a-d32p-hg1g_firmware"},{"vendor":"idec","product":"kit-fc6a-d32p-hg2g-5tn_firmware"},{"vendor":"idec","product":"kit-fc6a-d32p-hg2g-5tt_firmware"},{"vendor":"idec","product":"kit-fc6a-p16-k_firmware"},{"vendor":"idec","product":"kit-fc6a-p16-r_firmware"},{"vendor":"idec","product":"kit-fc6a-p16-s_firmware"},{"vendor":"idec","product":"kit-fc6a-p32-k_firmware"},{"vendor":"idec","product":"kit-fc6a-p32-s_firmware"},{"vendor":"idec","product":"kit-smart-12-bac_firmware"},{"vendor":"idec","product":"kit-smart-12-bdc_firmware"},{"vendor":"idec","product":"kit-smart-12-hac_firmware"},{"vendor":"idec","product":"kit-smart-12-hdc_firmware"},{"vendor":"idec","product":"kit-smart-24-bac_firmware"},{"vendor":"idec","product":"kit-smart-24-bdc_firmware"},{"vendor":"idec","product":"kit-smart-24-hac_firmware"},{"vendor":"idec","product":"kit-smart-24-hdc_firmware"},{"vendor":"idec","product":"kit-smart-40-bac-r_firmware"},{"vendor":"idec","product":"kit-smart-40-bdc-rk_firmware"},{"vendor":"idec","product":"kit-smart-40-bdc-rs_firmware"},{"vendor":"idec","product":"kit-smart-40-hac-r_firmware"},{"vendor":"idec","product":"kit-smart-40-hdc-rk_firmware"},{"vendor":"idec","product":"kit-smart-40-hdc-rs_firmware"},{"vendor":"idec","product":"kit-smart-48-bac-k_firmware"},{"vendor":"idec","product":"kit-smart-48-bac-s_firmware"},{"vendor":"idec","product":"kit-smart-48-bdc-k_firmware"},{"vendor":"idec","product":"kit-smart-48-bdc-s_firmware"},{"vendor":"idec","product":"kit-smart-48-hac-k_firmware"},{"vendor":"idec","product":"kit-smart-48-hac-s_firmware"},{"vendor":"idec","product":"kit-smart-48-hdc-s_firmware"},{"vendor":"idec corporation","product":"fc6a series microsmart all-in-one cpu module"},{"vendor":"idec corporation","product":"fc6a series microsmart plus cpu module"},{"vendor":"idec corporation","product":"fc6b series microsmart all-in-one cpu module"},{"vendor":"idec corporation","product":"fc6b series microsmart plus cpu module"},{"vendor":"idec corporation","product":"ft1a series smartaxis pro/lite"}],"references":[{"url":"https://us.idec.com/media/24-RD-0256-EN-b.pdf"},{"url":"https://jvn.jp/en/vu/JVNVU96959731/","tags":["Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-41927"},{"url":"https://jvn.jp/en/vu/JVNVU96959731"},{"url":"https://us.idec.com/media/24-RD-0256-EN.pdf"},{"url":"https://github.com/advisories/GHSA-q4gj-2fgv-hpxf"}],"sources":{"cve":[{"id":"CVE-2024-41927","description":"Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained. As a result, the program of the PLC may be obtained, and the PLC may be manipulated.","status":"published","published":"2024-09-04T00:43:55.555Z","modified":"2025-07-02T01:23:14.549Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-319","CWE-319"],"updated_at":"2026-11-02T14:34:04.00829Z"}],"euvd":[{"id":"EUVD-2024-39278","description":"Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained. As a result, the program of the PLC may be obtained, and the PLC may be manipulated.","status":"published","published":"2024-09-04T00:43:55Z","modified":"2025-07-02T01:23:14Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:14.813568Z"}],"ghsa":[{"id":"GHSA-q4gj-2fgv-hpxf","title":"Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an...","description":"Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained. As a result, the program of the PLC may be obtained, and the PLC may be manipulated.","status":"published","published":"2024-09-04T03:30:44Z","modified":"2025-07-02T03:31:23Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T15:02:53.302581Z"}],"nvd":[{"id":"CVE-2024-41927","description":"Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained. As a result, the program of the PLC may be obtained, and the PLC may be manipulated.","status":"published","published":"2024-09-04T01:15:11.827Z","modified":"2026-06-17T07:48:27.903Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-319"],"updated_at":"2026-11-02T14:10:24.514378Z"}]}}