CRITICAL🇵🇱 Wersja polska

CVE-2019-18261

CVSS 9.8v3.1pub. 2019-12-16upd. 2024-11-21

In Omron PLC CS series, all versions, Omron PLC CJ series, all versions, and Omron PLC NJ series, all versions, the software does not implement sufficient measures to prevent multiple failed authentication attempts within in a short time frame, making it more susceptible to brute force attacks.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Omron Plc Cj Firmware

    OS
    Omron
    wszystkie wersje

  • Omron Plc Cs Firmware

    OS
    Omron
    wszystkie wersje

  • Omron Plc Nj Firmware

    OS
    Omron
    wszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2019-18259CRITICAL9.8ten sam produkt

In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary ...

CVE-2019-18269CRITICAL9.8ten sam produkt

Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability.

CVE-2019-13533HIGH8.1ten sam produkt

In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic...

CVE-2023-27396CRITICAL9.8ten sam vendor

FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in ...

CVE-2023-0811CRITICAL9.1ten sam vendor

Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is sto...