ICSA-15-274-01

icsaUScisa_csaf_ot

Omron Multiple Product Vulnerabilities

view advisory published 2015-07-04

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2015-1015USlow2.1—
Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 use a reversible format for password storage in object files on Compact Flash ca…
CVE-2015-0988USlow2.1—
Omron CX-One CX-Programmer before 9.6 uses a reversible format for password storage in project source-code files, which makes it easier for local users to obtain sensitive informat…
CVE-2015-0987USmedium5.0OT elevated—
Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 rely on cleartext password transmission, which allows remote attackers to obtain…
02

references

External citations — patches, advisories, analysis.

03

remediations (9)

  • MitigationCJ2H Series PLC

    Update to the latest software versions.

  • MitigationCJ2H Series PLC

    Update to the latest software versions.

  • MitigationCJ2H Series PLC

    Update to the latest software versions.

  • MitigationCJ2M Series PLC

    Update to the latest software versions.

  • MitigationCJ2M Series PLC

    Update to the latest software versions.

  • MitigationCJ2M Series PLC

    Update to the latest software versions.

  • MitigationCX-Programmer software

    Update to the latest software versions.

  • MitigationCX-Programmer software

    Update to the latest software versions.

  • MitigationCX-Programmer software

    Update to the latest software versions.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan