IDEC PLCs Credential Transport and Storage Vulnerabilities (CVE-2021-37400/37401/20826/20827)

Vulnerability Key Information Vulnerability ID: JVN#92279973 Vulnerability Name: Multiple vulnerabilities in IDEC PLCs Release Date: 2021/12/24 Last Updated: 2022/01/07 Affected Products CVE-2021-37400, CVE-2021-37401 - FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier - FC6B Series MICROSmart All-in-One CPU module v2.31 and earlier - FC6A Series MICROSmart Plus CPU module v1.91 and earlier - FC6B Series MICROSmart Plus CPU module v2.31 and earlier - FT1A Series SmartAxix Pro/Lite v2.31 and earlier - WindLDR v8.19.1 and earlier - WindEDIT v1.3.1 and earlier - Data File Manager v2.12.1 and earlier CVE-2021-20826, CVE-2021-20827 - FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier - FC6A Series MICROSmart Plus CPU module v1.91 and earlier - WindLDR v8.19.1 and earlier - WindEDIT Lite v1.3.1 and earlier - Data File Manager v2.12.1 and earlier Description Unprotected transport of credentials (CVE-523) - CVE-2021-37400 Plaintext storage of a password (CVE-256) - CVE-2021-37401 Unprotected transport of credentials (CVE-523) - CVE-2021-20826 Plaintext storage of a password (CVE-256) - CVE-2021-20827 Impact An attacker may obtain user credentials. The PLC user program may be uploaded, modified, and/or downloaded. The PLC output may be manipulated, or the PLC may be suspended. Solution Update software: - FC6A Series MICROSmart All-in-One CPU module v2.40 and later - FC6B Series MICROSmart All-in-One CPU module v2.40 and later - FC6A Series MICROSmart Plus CPU module v2.00 and later - WindLDR v8.20.0 and later - WindEDIT Lite v1.4.0 and later - Data File Manager v2.13.0 and later Apply workarounds: - Restrict network access appropriately. - Limit devices that can access PLCs. - Manage ZLD files appropriately. References 1. ICS Advisory (ICSA-22-006-03) IDEC PLCs Vulnerability Analysis by JPCERT/CC CVEs were assigned by MITRE and JPCERT/CC at the request of Khalid Ansari. Credit Khalid Ansari of FM Approvals reported these vulnerabilities to IDEC Corporation.

Goal Reached Thanks to every supporter — we hit 100%!

IDEC PLCs Credential Transport and Storage Vulnerabilities (CVE-2021-37400/37401/20826/20827)