VYPR

Sysmac Cj2h Firmware

by Omron

CVEs (3)

  • CVE-2022-31207CriJul 26, 2022
    risk 0.64cvss 9.8epss 0.01

    The Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18 lack cryptographic authentication. They utilize the Omron FINS (9600/TCP) protocol for engineering purposes, including downloading projects and control logic to the PLC. This…

  • CVE-2022-31205HigJul 26, 2022
    risk 0.49cvss 7.5epss 0.01

    In Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to the Web UI is stored in memory area D1449...D1452 and can be read out using the Omron FINS protocol without any further authentication.

  • CVE-2022-31204HigJul 26, 2022
    risk 0.49cvss 7.5epss 0.01

    Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or system integrators to configure a password in order to restrict sensitive engineering operations (such as project/logic uploads…