CVE-2024-28747: Ifm Smart PLC AC14XX Firmware

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges.

Affected products

• Ifm Smart PLC AC14XX Firmware: up to and including V4.3.17; up to and including 4.3.17
• Ifm Smart PLC AC4XXS Firmware: up to and including V4.3.17; up to and including 4.3.17

Published 2024-07-09. Last modified 2026-06-17.