CVE-2024-41716

Cleartext storage of sensitive information vulnerability exists in WindLDR and WindO/I-NV4. If this vulnerability is exploited, an attacker who obtained the product's project file may obtain user credentials of the PLC or Operator Interfaces. As a result, an attacker may be able to manipulate and/or suspend the PLC and Operator Interfaces by accessing or hijacking them.

• CWE-312
• CWE-312

• https://jvn.jp/en/jp/JVN08342147/Third Party Advisory
• https://us.idec.com/media/24-RD-0219-EN.pdfVendor Advisory

Published

Sep 4, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-41710A vulnerability in the Mitel 6800 Series, 6900 Series, and 6…7.2
• CVE-2024-41711A vulnerability in the Mitel 6800 Series, 6900 Series, and 6…6.8
• CVE-2024-41712A vulnerability in the Web Conferencing Component of Mitel M…6.6
• CVE-2024-41713A vulnerability in the NuPoint Unified Messaging (NPM) compo…9.1
• CVE-2024-41714A vulnerability in the Web Interface component of Mitel MiCo…8.8
• CVE-2024-41715The goTenna Pro ATAK Plugin does not inject extra characters…4.3
• CVE-2024-41717Kieback & Peter's DDC4000 series is vulnerable to a path tra…9.8
• CVE-2024-41718Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID. Consul…
• CVE-2024-41719When generating QKView of BIG-IP Next instance from the BIG-…5.5
• CVE-2024-4172A vulnerability classified as problematic was found in idcCM…4.3
• CVE-2024-41720Incorrect permission assignment for critical resource issue …8
• CVE-2024-41721An insufficient boundary validation in the USB code could le…8.1