ICSA-15-274-01

icsaUScisa_csaf_ot

Omron Multiple Product Vulnerabilities

Advisory ansehen veröffentlicht 2015-07-04

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

beschreibt (3)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2015-1015USlow2.1—
Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 use a reversible format for password storage in object files on Compact Flash ca…
CVE-2015-0988USlow2.1—
Omron CX-One CX-Programmer before 9.6 uses a reversible format for password storage in project source-code files, which makes it easier for local users to obtain sensitive informat…
CVE-2015-0987USmedium5.0OT erhöht—
Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 rely on cleartext password transmission, which allows remote attackers to obtain…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (9)

  • MitigationCJ2H Series PLC

    Update to the latest software versions.

  • MitigationCJ2H Series PLC

    Update to the latest software versions.

  • MitigationCJ2H Series PLC

    Update to the latest software versions.

  • MitigationCJ2M Series PLC

    Update to the latest software versions.

  • MitigationCJ2M Series PLC

    Update to the latest software versions.

  • MitigationCJ2M Series PLC

    Update to the latest software versions.

  • MitigationCX-Programmer software

    Update to the latest software versions.

  • MitigationCX-Programmer software

    Update to the latest software versions.

  • MitigationCX-Programmer software

    Update to the latest software versions.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan