Smart Plc Ac4xxs Firmware CVEs and Security Vulnerabilities

CVE-2024-28747

ifm: Use of Hard-coded Credentials

An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Ifm

Products

Smart Plc Ac14xx Firmware Smart Plc Ac4xxs Firmware

CVE-2024-28748

A remote attacker with high privileges may use a reading file function to inject OS commands.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Ifm

Products

Smart Plc Ac14xx Firmware Smart Plc Ac4xxs Firmware

CVE-2024-28749

A remote attacker with high privileges may use a writing file function to inject OS commands.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Ifm

Products

Smart Plc Ac14xx Firmware Smart Plc Ac4xxs Firmware

CVE-2024-28750

A remote attacker with high privileges may use a deleting file function to inject OS commands.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Ifm

Products

Smart Plc Ac14xx Firmware Smart Plc Ac4xxs Firmware

CVE-2024-28751

An high privileged remote attacker can enable telnet access that accepts hardcoded credentials.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Ifm

Products

Smart Plc Ac14xx Firmware Smart Plc Ac4xxs Firmware