CVE-2021-20827 Hardcoded credentials in IDEC PLC
Attackers can extract plaintext PLC credentials from backup files to hijack the PLC, manipulate outputs, or suspend operations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-20827?
CVE-2021-20827 is a high-severity vulnerability in IDEC PLC, published on 24 Dec 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Plaintext storage of a password vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier, WindLDR v8.19.1 and earlier, WindEDIT Lite v1.3.1 and earlier, and Data File Manager v2.12.1 and earlier) allows an attacker to obtain the PLC Web server user credentials from file servers, backup repositories, or ZLD files saved in SD cards. As a result, the attacker may access the PLC Web server and hijack the PLC, and manipulation of the PLC output and/or suspension of the PLC may be conducted.
Weakness: CWE-312
Which versions are affected by CVE-2021-20827?
It affects 5 products.
Products include Idec Data File Manager, Idec Microsmart Fc6a Firmware, Idec Microsmart Plus Fc6a Firmware, Idec Windedit, Idec Windldr.
How do I fix CVE-2021-20827?
No fix has been published for CVE-2021-20827 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-20827 being exploited?
There is no known exploitation of CVE-2021-20827 in the wild and no public exploit code.
Other vulnerabilities in IDEC PLC
Sources
Also known as GHSA-hxfc-cc7r-hxxv.