High severity7.5NVD Advisory· Published Jul 26, 2022· Updated Jun 17, 2026

CVE-2022-31204

Description

Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or system integrators to configure a password in order to restrict sensitive engineering operations (such as project/logic uploads and downloads). This password is set using the OMRON FINS command Program Area Protect and unset using the command Program Area Protect Clear, both of which are transmitted in cleartext.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Omron/CS series, CJ series, and CP series PLCsdescription
Omron/PLCllm-create
Range: <=2022-05-18
Omron/Sysmac Cs1 Firmware
cpe:2.3:o:omron:sysmac_cs1_firmware:*:*:*:*:*:*:*:*
Range: <4.1
Omron/Sysmac Cj2m Firmware
cpe:2.3:o:omron:sysmac_cj2m_firmware:*:*:*:*:*:*:*:*
Range: <2.1
Omron/Sysmac Cj2h Firmware
cpe:2.3:o:omron:sysmac_cj2h_firmware:*:*:*:*:*:*:*:*
Range: <1.5
Omron/Sysmac Cp1e Firmware
cpe:2.3:o:omron:sysmac_cp1e_firmware:*:*:*:*:*:*:*:*
Range: <1.30
Omron/Sysmac Cp1h Firmware
cpe:2.3:o:omron:sysmac_cp1h_firmware:*:*:*:*:*:*:*:*
Range: <1.30
Omron/Sysmac Cp1l Firmware
cpe:2.3:o:omron:sysmac_cp1l_firmware:*:*:*:*:*:*:*:*
Range: <1.10
Omron/Cp1w Cif41 Firmware
cpe:2.3:o:omron:cp1w-cif41_firmware:-:*:*:*:*:*:*:*
Omron/Cx Programmer
cpe:2.3:a:omron:cx-programmer:*:*:*:*:*:*:*:*
Range: <9.6

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-22-179-02nvdThird Party AdvisoryUS Government Resource
www.forescout.com/blog/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000