Vulmon
Critical Infrastructure Sectors: Critical Manufacturing
The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software (which compiles IEC 61131-3 conformant POU code to native machine code for execution by the PLC's runtime). The resulting machine code is executed by a runtime, typically controlled by a real-time operating system. The logic that is downloaded to the PLC does not seem to be cryptographically authenticated, allowing an malicious user to manipulate transmitted object code to the PLC and execute arbitrary machine code on the processor of the PLC's CPU module in the context of the runtime. In the case of at least the NJ series, an RTOS and hardware combination is used that would potentially allow for memory protection and privilege separation and thus limit the impact of code execution. However, it was not confirmed whether these sufficiently segment the runtime from the rest of the RTOS.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
omron nx701-1600_firmware |
||
omron nx701-1620_firmware |
||
omron nx701-1700_firmware |
||
omron nx701-1720_firmware |
||
omron nx701-z600_firmware |
||
omron nx701-z700_firmware |
||
omron nj101-1000_firmware |
||
omron nj101-1020_firmware |
||
omron nj101-9000_firmware |
||
omron nj101-9020_firmware |
||
omron nj301-1100_firmware |
||
omron nj301-1200_firmware |
||
omron nj501-1300_firmware |
||
omron nj501-1320_firmware |
||
omron nj501-1340_firmware |
||
omron nj501-1400_firmware |
||
omron nj501-1420_firmware |
||
omron nj501-1500_firmware |
||
omron nj501-1520_firmware |
||
omron nj501-4300_firmware |
||
omron nj501-4320_firmware |
||
omron nj501-4400_firmware |
||
omron nj501-4500_firmware |
||
omron nj501-5300_firmware |
||
omron nj501-5300-1_firmware |
Topics Security Off-Prem On-Prem Software Offbeat Vendor Voice Vendor Voice Resources Nearly 60 holes found affecting 'more than 30,000' machines worldwide
Fifty-six vulnerabilities – some deemed critical – have been found in industrial operational technology (OT) systems from ten global manufacturers including Honeywell, Ericsson, Motorola, and Siemens, putting more than 30,000 devices worldwide at risk, according to the US government's CISA and private security researchers. Some of these vulnerabilities received CVSS severity scores as high as 9.8 out of 10. That is particularly bad, considering these devices are used in critical infras...