Iliya Rogachev

The issue is related to the use of hard-coded passwords in the software, allowing an unauthenticated attacker to disclose sensitive information. This can result in unauthenticated users being able to view programs and project files or execute programs illegally. The vulnerability can be exploited by a remote attacker to gain access to protected information.

The issue allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated attackers may view programs and project files or execute programs illegally.

The issue allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated attackers may view programs and project files or execute programs illegally.

The issue allows a remote unauthenticated attacker to disclose sensitive information due to the use of a hard-coded cryptographic key. This enables unauthenticated users to view programs and project files or execute programs illegally.

The issue is related to the storage of sensitive information in cleartext, allowing a remote unauthenticated attacker to disclose this information. As a result, attackers can gain unauthorized access to the MELSEC CPU module and the MELSEC OPC UA server module.

The issue allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally.

The issue is related to the cleartext storage of sensitive information, specifically password hashes, in files. This allows a remote attacker to disclose or tamper with these files, potentially leading to privilege escalation. The vulnerability is associated with the unencrypted storage of credentials, which can be exploited by a remote attacker to gain elevated privileges using a file named 00000001.SYP.

The issue is related to the cleartext storage of sensitive information in the programable logic controllers of the affected devices. This allows a remote unauthenticated attacker to disclose a file in a legitimate user's product by using previously eavesdropped cleartext information and to counterfeit a legitimate user’s system.

The issue is related to the use of a password hash instead of the password for authentication, allowing a remote unauthenticated attacker to login to the product by replaying an eavesdropped password hash. This may enable an attacker to gain unauthorized access to protected information.

The issue is related to the use of a weak hash in the password storage mechanism, allowing a remote unauthenticated attacker to login to the product by using a password reversed from a previously eavesdropped password hash. This could potentially lead to unauthorized access to protected information.