HIGH🇵🇱 Wersja polska

CVE-2022-31205

CVSS 7.5v3.1pub. 2022-07-26upd. 2024-11-21

In Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to the Web UI is stored in memory area D1449...D1452 and can be read out using the Omron FINS protocol without any further authentication.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Omron Cp1w Cif41

    HW
    Omron
    all versions

  • Omron Cp1w Cif41 Firmware

    OS
    Omron
    all versions

  • Omron Sysmac Cj2h

    HW
    Omron
    all versions

  • Omron Sysmac Cj2h Firmware

    OS
    Omron
    < 1.5

  • Omron Sysmac Cj2m

    HW
    Omron
    all versions

  • Omron Sysmac Cj2m Firmware

    OS
    Omron
    < 2.1

  • Omron Sysmac Cp1e

    HW
    Omron
    all versions

  • Omron Sysmac Cp1e Firmware

    OS
    Omron
    < 1.30

  • Omron Sysmac Cp1h

    HW
    Omron
    all versions

  • Omron Sysmac Cp1h Firmware

    OS
    Omron
    < 1.30

  • Omron Sysmac Cp1l

    HW
    Omron
    all versions

  • Omron Sysmac Cp1l Firmware

    OS
    Omron
    < 1.10

  • Omron Sysmac Cs1

    HW
    Omron
    all versions

  • Omron Sysmac Cs1 Firmware

    OS
    Omron
    < 4.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-31207CRITICAL9.8PL ✓same product

Brak uwierzytelnienia kryptograficznego w sterownikach PLC Omron SYSMAC

CVE-2022-31204HIGH7.5same product

Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM P...

CVE-2023-27396CRITICAL9.8PL ✓same vendor

OMRON FINS Protocol — brak uwierzytelnienia i komunikacja jawnym tekstem

CVE-2023-0811CRITICAL9.1PL ✓same vendor

Omron CJ1M – błędna kontrola dostępu do obszaru hasła UM

CVE-2023-22357CRITICAL9.8PL ✓same vendor

Aktywny kod debugowania w OMRON CP1L-EL20DR-D umożliwia RCE bez uwierzytelnienia