Description
An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ifm | Smart PLC AC14xx Firmware | ≤ V4.3.17 | — |
| ifm | Smart PLC AC4xxS Firmware | ≤ V4.3.17 | — |
Advisories 1
- VDE-2024-012 ifm: Vulnerabilities in ifm AC14 firmware CERT@VDE · Jan 15, 2026