CVE-2019-13533

2019-12-1619:25:00

CWE-294

icscert

www.cve.org

8.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.6%

JSON

In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and replay requests that could result in the opening and closing of industrial valves.

CNA Affected

[
  {
    "product": "Omron PLC CJ and CS Series",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Omron PLC CJ series, all versions, Omron PLC CS series, all versions"
      }
    ]
  }
]

References

www.us-cert.gov/ics/advisories/icsa-19-346-02