Skip to content
OpenAdvisories
Medium ICSA-22-179-02 4 CVEs

Omron SYSMAC CS/CJ/CP Series and NJ/NX Series

Published Jun 28, 2022 · Updated Jun 28, 2022

Vendor: Omron Product: CP1W-CIF41 Product: SYSMAC CJ2H Product: SYSMAC CJ2M Product: SYSMAC CP1E/CP1H Product: SYSMAC CP1L Product: SYSMAC CS1H/CJ1G Product: SYSMAC CX-Programmer Product: SYSMAC NJ/NX Series

Summary

Successful exploitation of these vulnerabilities could cause a denial-of-service condition and allow remote code execution.

Vulnerabilities 4

  • Unscored —
    CVE-2022-31204

    Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection…

  • Unscored —
    CVE-2022-31205

    In Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to the Web UI is stored i…

  • Unscored —
    CVE-2022-31206

    The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cry…

  • Unscored —
    CVE-2022-31207

    The Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18 lack cryptographic aut…

Revision history

  1. #1

    Publication Date

References