Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2021-37401
Analyzed
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-28 Dec, 2021 | 13:15
Updated At-07 Jan, 2022 | 20:29

An attacker may obtain the user credentials from file servers, backup repositories, or ZLD files saved in SD cards. As a result, the PLC user program may be uploaded, altered, and/or downloaded.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.19.8CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary2.07.5HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Type: Primary
Version: 3.1
Base score: 9.8
Base severity: CRITICAL
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Type: Primary
Version: 2.0
Base score: 7.5
Base severity: HIGH
Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P
CPE Matches
idec
idec
>>data_file_manager>>Versions up to 2.12.1(inclusive)
cpe:2.3:a:idec:data_file_manager:*:*:*:*:*:*:*:*
idec
idec
>>windedit>>Versions up to 1.3.1(inclusive)
cpe:2.3:a:idec:windedit:*:*:*:*:*:*:*:*
idec
idec
>>windldr>>Versions up to 8.19.1(inclusive)
cpe:2.3:a:idec:windldr:*:*:*:*:*:*:*:*
idec
idec
>>microsmart_plus_fc6b>>-
cpe:2.3:h:idec:microsmart_plus_fc6b:-:*:*:*:*:*:*:*
idec
idec
>>microsmart_plus_fc6b_firmware>>Versions up to 2.31(inclusive)
cpe:2.3:o:idec:microsmart_plus_fc6b_firmware:*:*:*:*:*:*:*:*
idec
idec
>>microsmart_plus_fc6a>>-
cpe:2.3:h:idec:microsmart_plus_fc6a:-:*:*:*:*:*:*:*
idec
idec
>>microsmart_plus_fc6a_firmware>>Versions up to 1.91(inclusive)
cpe:2.3:o:idec:microsmart_plus_fc6a_firmware:*:*:*:*:*:*:*:*
idec
idec
>>microsmart_fc6b>>-
cpe:2.3:h:idec:microsmart_fc6b:-:*:*:*:*:*:*:*
idec
idec
>>microsmart_fc6b_firmware>>Versions up to 2.31(inclusive)
cpe:2.3:o:idec:microsmart_fc6b_firmware:*:*:*:*:*:*:*:*
idec
idec
>>microsmart_fc6a>>-
cpe:2.3:h:idec:microsmart_fc6a:-:*:*:*:*:*:*:*
idec
idec
>>microsmart_fc6a_firmware>>Versions up to 2.32(inclusive)
cpe:2.3:o:idec:microsmart_fc6a_firmware:*:*:*:*:*:*:*:*
idec
idec
>>ft1a_smartaxix_pro>>-
cpe:2.3:h:idec:ft1a_smartaxix_pro:-:*:*:*:*:*:*:*
idec
idec
>>ft1a_smartaxix_pro_firmware>>Versions up to 2.31(inclusive)
cpe:2.3:o:idec:ft1a_smartaxix_pro_firmware:*:*:*:*:*:*:*:*
idec
idec
>>ft1a_smartaxix_lite>>-
cpe:2.3:h:idec:ft1a_smartaxix_lite:-:*:*:*:*:*:*:*
idec
idec
>>ft1a_smartaxix_lite_firmware>>Versions up to 2.31(inclusive)
cpe:2.3:o:idec:ft1a_smartaxix_lite_firmware:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-522Primarynvd@nist.gov
CWE ID: CWE-522
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://jvn.jp/en/vu/JVNVU92279973/cve@mitre.org
Third Party Advisory
https://us.idec.com/idec-us/en/USD/Programmable-Logic-Controller/Micro-PLC/FC6A-MicroSmart/c/MicroSmart_FC6Acve@mitre.org
Vendor Advisory
https://us.idec.com/idec-us/en/USD/Software-Downloads-Automation-Organizercve@mitre.org
Vendor Advisory
https://www.idec.com/home/lp/pdf/2021-12-24-PLC.pdfcve@mitre.org
Vendor Advisory
Hyperlink: https://jvn.jp/en/vu/JVNVU92279973/
Source: cve@mitre.org
Resource:
Third Party Advisory
Hyperlink: https://us.idec.com/idec-us/en/USD/Programmable-Logic-Controller/Micro-PLC/FC6A-MicroSmart/c/MicroSmart_FC6A
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: https://us.idec.com/idec-us/en/USD/Software-Downloads-Automation-Organizer
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: https://www.idec.com/home/lp/pdf/2021-12-24-PLC.pdf
Source: cve@mitre.org
Resource:
Vendor Advisory
Change History
0Changes found
Details not found