CVE-2022-31204

Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or system integrators to configure a password in order to restrict sensitive engineering operations (such as project/logic uploads and downloads). This password is set using the OMRON FINS command Program Area Protect and unset using the command Program Area Protect Clear, both of which are transmitted in cleartext.

• Omron Cp1w Cif41

  HW
  Omron
  all versions

• Omron Cp1w Cif41 Firmware

  OS
  Omron
  all versions

• Omron Cx Programmer

  APP
  Omron
  < 9.6

• Omron Sysmac Cj2h

  HW
  Omron
  all versions

• Omron Sysmac Cj2h Firmware

  OS
  Omron
  < 1.5

• Omron Sysmac Cj2m

  HW
  Omron
  all versions

• Omron Sysmac Cj2m Firmware

  OS
  Omron
  < 2.1

• Omron Sysmac Cp1e

  HW
  Omron
  all versions

• Omron Sysmac Cp1e Firmware

  OS
  Omron
  < 1.30

• Omron Sysmac Cp1h

  HW
  Omron
  all versions

• Omron Sysmac Cp1h Firmware

  OS
  Omron
  < 1.30

• Omron Sysmac Cp1l

  HW
  Omron
  all versions

• Omron Sysmac Cp1l Firmware

  OS
  Omron
  < 1.10

• Omron Sysmac Cs1

  HW
  Omron
  all versions

• Omron Sysmac Cs1 Firmware

  OS
  Omron
  < 4.1