omron cj2m plc vulnerabilities and exploits

(subscribe to this query)

An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC internal memory and memory card.

The Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18 lack cryptographic authentication. They utilize the Omron FINS (9600/TCP) protocol for engineering purposes, including downloading projects and control logic to the PLC. This protocol...

Omron Sysmac Cs1 Firmware Omron Sysmac Cj2m Firmware Omron Sysmac Cj2h Firmware Omron Sysmac Cp1e Firmware Omron Sysmac Cp1h Firmware Omron Sysmac Cp1l Firmware Omron Cp1w-cif41 Firmware -

Omron CX-One CX-Programmer prior to 9.6, CJ2M PLC devices prior to 2.1, and CJ2H PLC devices prior to 1.5 use a reversible format for password storage in object files on Compact Flash cards, which makes it easier for local users to obtain sensitive information by reading a file.

Omron Cx-programmer 9.5 Omron Cj2m Plc 2.0 Omron Cj2h Plc 1.4

Omron CX-One CX-Programmer prior to 9.6, CJ2M PLC devices prior to 2.1, and CJ2H PLC devices prior to 1.5 rely on cleartext password transmission, which allows remote malicious users to obtain sensitive information by sniffing the network during a PLC unlock request.

Omron Cx-programmer Omron Cj2h Plc Omron Cj2m Plc

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook