Authentication flaw

2022-07-2622:15:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.0%

JSON

In Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to the Web UI is stored in memory area D1449…D1452 and can be read out using the Omron FINS protocol without any further authentication.

CPENameOperatorVersion
sysmac_cj2h_firmwarelt1.5
sysmac_cj2m_firmwarelt2.1
sysmac_cp1e_firmwarelt1.30
sysmac_cp1h_firmwarelt1.30
sysmac_cp1l_firmwarelt1.10
sysmac_cs1_firmwarelt4.1

Name	Operator	Version
sysmac_cj2h_firmware	lt	1.5
sysmac_cj2m_firmware	lt	2.1
sysmac_cp1e_firmware	lt	1.30
sysmac_cp1h_firmware	lt	1.30
sysmac_cp1l_firmware	lt	1.10
sysmac_cs1_firmware	lt	4.1