CVE-2024-41716 Information

Description

Cleartext storage of sensitive information vulnerability exists in WindLDR and WindO/I-NV4. If this vulnerability is exploited an attacker who obtained the product’s project file may obtain user credentials of the PLC or Operator Interfaces. As a result an attacker may be able to manipulate and/or suspend the PLC and Operator Interfaces by accessing or hijacking them.

Reference

https://us.idec.com/media/24-RD-0219-EN.pdf https://jvn.jp/en/jp/JVN08342147/