Omron SYSMAC CS/CJ/CP Series and NJ/NX Series
Successful exploitation of these vulnerabilities could cause a denial-of-service condition and allow remote code execution.
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-31207US | critical9.8OT erhöht | — | ||
The Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18 lack cryptographic authentication. They utilize the Omron FINS (9600/TCP) protocol… | ||||
| CVE-2022-31206US | critical9.8OT erhöht | — | ||
The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using th… | ||||
| CVE-2022-31205US | high7.5OT erhöht | — | ||
In Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to the Web UI is stored in memory area D1449...D1452 and can be read out using the Omr… | ||||
| CVE-2022-31204US | high7.5OT erhöht | — | ||
Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or system integrators to configure… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (32)
- MitigationCP1W-CIF41
For CVE-2022-31204: Omron recommends users implement an extended password protection function in the following product versions: CJ2H: v1.5 or later
- MitigationCP1W-CIF41
For CVE-2022-31205: Omron recommends using different passwords between the CP1W-CIF41 Ethernet Option Board and CP1 PLC itself. The Web UI password will not grant access to the PLC.
- MitigationCP1W-CIF41
For CVE-2022-31206: Omron intends to publish an update for SYSMAC NJ/NX in July 2022.
- MitigationCP1W-CIF41
For CVE-2022-31207: Omron recommends users of SYSMAC CS/CJ/CP Series to use the PLC protection password and enable protection against unauthorized write access to address. Also, there are hardware DIP switches on the PLC which can prevent unauthorized PLC program changes regardless of password.
- MitigationSYSMAC CJ2H
For CVE-2022-31204: Omron recommends users implement an extended password protection function in the following product versions: CJ2H: v1.5 or later
- MitigationSYSMAC CJ2H
For CVE-2022-31205: Omron recommends using different passwords between the CP1W-CIF41 Ethernet Option Board and CP1 PLC itself. The Web UI password will not grant access to the PLC.
- MitigationSYSMAC CJ2H
For CVE-2022-31206: Omron intends to publish an update for SYSMAC NJ/NX in July 2022.
- MitigationSYSMAC CJ2H
For CVE-2022-31207: Omron recommends users of SYSMAC CS/CJ/CP Series to use the PLC protection password and enable protection against unauthorized write access to address. Also, there are hardware DIP switches on the PLC which can prevent unauthorized PLC program changes regardless of password.
- MitigationSYSMAC CJ2M
For CVE-2022-31204: Omron recommends users implement an extended password protection function in the following product versions: CJ2H: v1.5 or later
- MitigationSYSMAC CJ2M
For CVE-2022-31205: Omron recommends using different passwords between the CP1W-CIF41 Ethernet Option Board and CP1 PLC itself. The Web UI password will not grant access to the PLC.
- MitigationSYSMAC CJ2M
For CVE-2022-31206: Omron intends to publish an update for SYSMAC NJ/NX in July 2022.
- MitigationSYSMAC CJ2M
For CVE-2022-31207: Omron recommends users of SYSMAC CS/CJ/CP Series to use the PLC protection password and enable protection against unauthorized write access to address. Also, there are hardware DIP switches on the PLC which can prevent unauthorized PLC program changes regardless of password.
- MitigationSYSMAC CP1E/CP1H
For CVE-2022-31204: Omron recommends users implement an extended password protection function in the following product versions: CJ2H: v1.5 or later
- MitigationSYSMAC CP1E/CP1H
For CVE-2022-31205: Omron recommends using different passwords between the CP1W-CIF41 Ethernet Option Board and CP1 PLC itself. The Web UI password will not grant access to the PLC.
- MitigationSYSMAC CP1E/CP1H
For CVE-2022-31206: Omron intends to publish an update for SYSMAC NJ/NX in July 2022.
- MitigationSYSMAC CP1E/CP1H
For CVE-2022-31207: Omron recommends users of SYSMAC CS/CJ/CP Series to use the PLC protection password and enable protection against unauthorized write access to address. Also, there are hardware DIP switches on the PLC which can prevent unauthorized PLC program changes regardless of password.
- MitigationSYSMAC CP1L
For CVE-2022-31204: Omron recommends users implement an extended password protection function in the following product versions: CJ2H: v1.5 or later
- MitigationSYSMAC CP1L
For CVE-2022-31205: Omron recommends using different passwords between the CP1W-CIF41 Ethernet Option Board and CP1 PLC itself. The Web UI password will not grant access to the PLC.
- MitigationSYSMAC CP1L
For CVE-2022-31206: Omron intends to publish an update for SYSMAC NJ/NX in July 2022.
- MitigationSYSMAC CP1L
For CVE-2022-31207: Omron recommends users of SYSMAC CS/CJ/CP Series to use the PLC protection password and enable protection against unauthorized write access to address. Also, there are hardware DIP switches on the PLC which can prevent unauthorized PLC program changes regardless of password.
- MitigationSYSMAC CS1H/CJ1G
For CVE-2022-31204: Omron recommends users implement an extended password protection function in the following product versions: CJ2H: v1.5 or later
- MitigationSYSMAC CS1H/CJ1G
For CVE-2022-31205: Omron recommends using different passwords between the CP1W-CIF41 Ethernet Option Board and CP1 PLC itself. The Web UI password will not grant access to the PLC.
- MitigationSYSMAC CS1H/CJ1G
For CVE-2022-31206: Omron intends to publish an update for SYSMAC NJ/NX in July 2022.
- MitigationSYSMAC CS1H/CJ1G
For CVE-2022-31207: Omron recommends users of SYSMAC CS/CJ/CP Series to use the PLC protection password and enable protection against unauthorized write access to address. Also, there are hardware DIP switches on the PLC which can prevent unauthorized PLC program changes regardless of password.
- MitigationSYSMAC CX-Programmer
For CVE-2022-31204: Omron recommends users implement an extended password protection function in the following product versions: CJ2H: v1.5 or later
- MitigationSYSMAC CX-Programmer
For CVE-2022-31205: Omron recommends using different passwords between the CP1W-CIF41 Ethernet Option Board and CP1 PLC itself. The Web UI password will not grant access to the PLC.
- MitigationSYSMAC CX-Programmer
For CVE-2022-31206: Omron intends to publish an update for SYSMAC NJ/NX in July 2022.
- MitigationSYSMAC CX-Programmer
For CVE-2022-31207: Omron recommends users of SYSMAC CS/CJ/CP Series to use the PLC protection password and enable protection against unauthorized write access to address. Also, there are hardware DIP switches on the PLC which can prevent unauthorized PLC program changes regardless of password.
- MitigationSYSMAC NJ/NX Series
For CVE-2022-31204: Omron recommends users implement an extended password protection function in the following product versions: CJ2H: v1.5 or later
- MitigationSYSMAC NJ/NX Series
For CVE-2022-31205: Omron recommends using different passwords between the CP1W-CIF41 Ethernet Option Board and CP1 PLC itself. The Web UI password will not grant access to the PLC.
- MitigationSYSMAC NJ/NX Series
For CVE-2022-31206: Omron intends to publish an update for SYSMAC NJ/NX in July 2022.
- MitigationSYSMAC NJ/NX Series
For CVE-2022-31207: Omron recommends users of SYSMAC CS/CJ/CP Series to use the PLC protection password and enable protection against unauthorized write access to address. Also, there are hardware DIP switches on the PLC which can prevent unauthorized PLC program changes regardless of password.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan