Description
The endpoint hosts a script that allows an unauthorized remote attacker to put the system in a fail-safe state over the network due to missing authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ifm electronic | ifm Smart PLC AC402s | 4.04 – < 4.3.17, 6.1.8 | 4.3.17 |
| ifm electronic | ifm Smart PLC AC422s | 4.04 – < 4.3.17, 6.1.8 | 4.3.17 |
| ifm electronic | ifm Smart PLC AC424s | 4.04 – < 4.3.17, 6.1.8 | 4.3.17 |
| ifm electronic | ifm Smart PLC AC432s | 4.04 – < 4.3.17, 6.1.8 | 4.3.17 |
| ifm electronic | ifm Smart PLC AC434s | 4.04 – < 4.3.17, 6.1.8 | 4.3.17 |
Advisories 1
- VDE-2024-061 ifm: Improper Access Control vulnerability CERT@VDE · Feb 18, 2026