CVE-2024-41716 - CVE House
Back to Database
Status published Unknown CVE-2024-41716

Cleartext storage of sensitive information vulnerability exists in WindLDR and...

Vulnerability Description

Cleartext storage of sensitive information vulnerability exists in WindLDR and WindO/I-NV4. If this vulnerability is exploited, an attacker who obtained the product's project file may obtain user credentials of the PLC or Operator Interfaces. As a result, an attacker may be able to manipulate and/or suspend the PLC and Operator Interfaces by accessing or hijacking them.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-41716

Credits & Attribution

No credits recorded in the NVD database.

References

More from IDEC Corporation

View All →
CVE-2024-41927
Cleartext transmission of sensitive information vulnerability exists in multiple IDEC...
Unknown 0
CVE-2021-20827
Plaintext storage of a password vulnerability in IDEC PLCs (FC6A...
High 7.5
CVE-2021-20826
Unprotected transport of credentials vulnerability in IDEC PLCs (FC6A Series...
High 7.6

Affected Vendor

IDEC Corporation

View all reports →

Affected Software

WindLDR, WindO/I-NV4
Vulnerable Versions:
Ver.9.1.0 and earlier, Ver.3.0.1

Timeline

Official Publish: September 4th, 2024
Last Modified: March 13th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.