Description
A remote attacker with high privileges may use a reading file function to inject OS commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ifm | Smart PLC AC14xx Firmware | ≤ V4.3.17 | — |
| ifm | Smart PLC AC4xxS Firmware | ≤ V4.3.17 | — |
Advisories 1
- VDE-2024-012 ifm: Vulnerabilities in ifm AC14 firmware CERT@VDE · Jan 15, 2026