IDEC Products (Update A)

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to obtain user authentication information or disrupt communication.

CVEs (2)

Remediations

• Apply the appropriate software update according to the information provided by the developer:
• FC6A Series MICROSmart All-in-One CPU module: Ver.2.70 and later
• FC6B Series MICROSmart All-in-One CPU module: Ver.2.70 and later
• FC6A Series MICROSmart Plus CPU module: Ver.2.50 and later
• FC6B Series MICROSmart Plus CPU module: Ver.2.70 and later
• FT1A Series SmartAXIS Pro/Lite: Ver.2.50 and later
• For more information, reference the IDEC Corporation advisory:
• Vulnerabilities regarding plaintext transmission of sensitive information and predictable ID usage(https://us.idec.com/media/24-RD-0256-EN-b.pdf)
• SX8R Bus Coupler Module: Ver.2.2.0 and later

Affected Vendors

Affected Products (6)

Affected Sectors

Critical Manufacturing, Energy, Food and Agriculture, Transportation Systems