https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:57:21.280225+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-02762 cnvd-2022-02762 2026-10-10T19:57:21.284801+00:00 cnvd-2022-02762 https://cve.radiocsirt.org/vuln/euvd-2026-29771 EUVD-2026-29771 2026-10-10T19:57:21.284834+00:00 EUVD-2026-29771 https://cve.radiocsirt.org/vuln/fkie_cve-2021-37400 fkie_cve-2021-37400 2026-10-10T19:57:21.284848+00:00

An attacker may obtain the user credentials from the communication between the PLC and the software. As a result, the PLC user program may be uploaded, altered, and/or downloaded.

 https://cve.radiocsirt.org/vuln/ghsa-gv42-v83p-3gw3 GHSA-gv42-v83p-3gw3 2026-10-10T19:57:21.284876+00:00

An attacker may obtain the user credentials from the communication between the PLC and the software. As a result, the PLC user program may be uploaded, altered, and/or downloaded.

 https://cve.radiocsirt.org/vuln/gsd-2021-37400 gsd-2021-37400 2026-10-10T19:57:21.284892+00:00 gsd-2021-37400 https://cve.radiocsirt.org/vuln/icsa-22-006-03 ICSA-22-006-03 — IDEC PLCs 2026-10-10T19:57:21.284903+00:00

An attacker may obtain the user credentials from the communication between the PLC and the software. As a result, the PLC user program may be uploaded, altered, and/or downloaded.CVE-2021-37400 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). An attacker may obtain the user credentials from file servers, backup repositories, or ZLD files saved in SD cards. As a result, the PLC user program may be uploaded, altered, and/or downloaded.CVE-2021-37401 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). An attacker may obtain the PLC web server user credentials from the communication between the PLC and the software. As a result, the complete access privileges to the PLC web server may be obtained, and manipulation of the PLC output and/or suspension of the PLC may be conducted.CVE-2021-20826 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L). An attacker may obtain the PLC web server user credentials from file servers, backup repositories, or ZLD files saved in SD cards. As a result, the attacker may access the PLC web server and hijack the PLC, and manipulation of the PLC output and/or suspension of the PLC may be conducted.CVE-2021-20827 has been assigned to this vulnera…

 https://cve.radiocsirt.org/vuln/jvndb-2021-006117 jvndb-2021-006117 2026-10-10T19:57:21.284935+00:00

Multiple PLCs provided by IDEC Corporation contain multiple vulnerabilities listed below. * Unprotected transport of credentials (CWE-523) - CVE-2021-37400 * Plaintext storage of a password (CWE-256) - CVE-2021-37401 * Unprotected transport of credentials (CWE-523) - CVE-2021-20826 * Plaintext storage of a password (CWE-256) - CVE-2021-20827 Khalid Ansari of FM Approvals reported these vulnerabilities to IDEC Corporation, and IDEC Corporation reported the case to JPCERT/CC and coordinated in order to notify users of the solutions through JVN.