Ifm

7 CVEs across 11 Ifm products. Browse Ifm vulnerabilities, severities, and proof-of-concept exploits.

Ifm products with known CVEs

ProductCVEs
Smart Plc Ac14xx Firmware5
Smart Plc Ac4xxs Firmware5
Moneo Appliance1
Moneo Appliance Qha2101
Moneo Appliance Qha3001
Moneo Appliance Qva2001
Moneo For Micosoft Windows1
Moneo Qha2001
Moneo Qha200 Firmware1
Moneo Qha2101
Moneo Qha210 Firmware1
Ifm CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-28751Critical9.12024-07-09An high privileged remote attacker can enable telnet access that accepts hardcoded credentials.
CVE-2024-28750High7.22024-07-09A remote attacker with high privileges may use a deleting file function to inject OS commands.
CVE-2024-28749High7.22024-07-09A remote attacker with high privileges may use a writing file function to inject OS commands.
CVE-2024-28748High7.22024-07-09A remote attacker with high privileges may use a reading file function to inject OS commands.
CVE-2024-28747Critical9.82024-07-09An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges.
CVE-2024-5404Critical9.82024-06-03An unauthenticated remote attacker can change the admin password in a moneo appliance due to weak password recovery mechanism.
CVE-2022-3485Critical9.82022-12-12In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password by only supplying the serial number and…