Description
Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a specific command to PLC's serial communication port, user credentials may be obtained. As a result, the program of the PLC may be obtained, and the PLC may be manipulated.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IDEC | FC6A Series MICROSmart All-in-One CPU module | Ver.2.60 and earlier | — |
| IDEC | FC6B Series MICROSmart All-in-One CPU module | Ver.2.60 and earlier | — |
| IDEC | FC6A Series MICROSmart Plus CPU module | Ver.2.40 and earlier | — |
| IDEC | FC6B Series MICROSmart Plus CPU module | Ver.2.60 and earlier | — |
| IDEC | FT1A Series SmartAXIS Pro/Lite | Ver.2.41 and earlier | — |
Advisories 1
- ICSA-24-263-02 IDEC Products (Update A) CISA ICS & IT advisories · Feb 18, 2026