High ICSA-19-346-02 3 CVEs

Omron PLC CJ and CS Series

Published Dec 12, 2019 · Updated Dec 12, 2019

Vendor: Omron Product: PLC CJ series Product: PLC CS series Product: PLC NX1P2 series

Summary

This updated advisory is a follow-up to the original advisory titled ICSA-19-346-02 Omron PLC CJ and CS Series (Update A) published November 29, 2022, on the ICS webpage at cisa.gov.

Vulnerabilities 3

High 8.6

CVE-2019-18269

Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability.

Omron Omron PLC CJ Series Omron PLC NX1P2 series Omron PLC CS series ICS / OT

Dec 16, 2019
High 8.1

CVE-2019-13533

In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between …

Dec 16, 2019
Unscored —

CVE-2019-18259

In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary messages …

Dec 16, 2019

Revision history

2019-12-12 #1
ICSA-19-346-02 Omron PLC CJ and CS Series

References

ICS Advisory ICSA-19-346-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-346-02
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://us-cert.cisa.gov/ics/Recommended-Practices
Recommended Practices
https://cisa.gov/ics