CVE:CVE-2021-20826
CNNVD:CNNVD-202112-2254
IDEC PLC是一个可编程控制器。
IDEC PLC 存在安全漏洞，攻击者可以从 PLC 和软件之间的通信中获取 PLC Web 服务器用户凭据。以下产品及版本收到影响：FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier, WindLDR v8.19.1 and earlier, WindEDIT Lite v1.3.1 and earlier, and Data File Manager v2.12.1 and earlier。
solution:Upgrade idec microsmart_fc6a_firmware to a higher version than 2.32,and avoid the version (,2.32]; Upgrade idec microsmart_plus_fc6a_firmware to a higher version than 1.91,and avoid the version (,1.91]; Upgrade idec data_file_manager to a higher version than 2.12.1,and avoid the version (,2.12.1]; Upgrade idec windedit to a higher version than 1.3.1,and avoid the version (,1.3.1]; Upgrade idec windldr to a higher version than 8.19.1,and avoid the version (,8.19.1]