CVE-2021-37401: Idec Data File Manager

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

An attacker may obtain the user credentials from file servers, backup repositories, or ZLD files saved in SD cards. As a result, the PLC user program may be uploaded, altered, and/or downloaded.

Affected products

• Idec Data File Manager: up to and including 2.12.1
• Idec FT1A Smartaxix Lite Firmware: up to and including 2.31
• Idec FT1A Smartaxix Pro Firmware: up to and including 2.31
• Idec Microsmart FC6A Firmware: up to and including 2.32
• Idec Microsmart FC6B Firmware: up to and including 2.31
• Idec Microsmart Plus FC6A Firmware: up to and including 1.91
• Idec Microsmart Plus FC6B Firmware: up to and including 2.31
• Idec Windedit: up to and including 1.3.1
• Idec Windldr: up to and including 8.19.1

Published 2021-12-28. Last modified 2026-06-17.