CVE-2019-18269

CVE-2019-18269 affects Omron CS and CJ series PLCs. The vulnerability is an unrestricted externally accessible lock, allowing remote interaction with PLCs (ICSA-19-346-02 indicates remote exploitation risk). Affected products are CS and CJ series PLCs (all versions), per multiple sources, with th...

CVE-2019-18259

In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary messages or execute commands...

CVE-2019-18259

CVE-2019-18259 affects Omron PLC CJ series and CS series (all versions). The vulnerability enables an attacker to spoof arbitrary messages or execute commands against the PLC, i.e., an authentication bypass by spoofing. NVD reports CVSSv3.1 base score 9.8 (CRITICAL) with network access, no privil...

CVE-2019-18269: Unrestricted Externally Accessible Lock

Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability...

CVE-2019-13533: Authentication Bypass by Capture-replay

In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and replay requests that could result in the opening and closing of industrial valves...

PT-2019-15303

Name of the Vulnerable Software and Affected Versions Omron PLC CS series, all versions Omron PLC CJ series, all versions Omron PLC NJ series, all versions Description The software does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame,...

PT-2019-13397

Name of the Vulnerable Software and Affected Versions Omron PLC CJ series, all versions Omron PLC CS series, all versions Description The issue allows an attacker to monitor traffic between the PLC and the controller and replay requests, potentially resulting in the unauthorized opening and closi...

PT-2019-15302

Name of the Vulnerable Software and Affected Versions Omron PLC CJ series, all versions Omron PLC CS series, all versions Description The issue allows an attacker to spoof arbitrary messages or execute commands. Recommendations For Omron PLC CJ series, all versions, and Omron PLC CS series, all...

CVE-2019-18259: Authentication Bypass by Spoofing

In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary messages or execute commands...

CVE-2019-18261: Improper Restriction of Excessive Authentication Attempts

In Omron PLC CS series, all versions, Omron PLC CJ series, all versions, and Omron PLC NJ series, all versions, the software does not implement sufficient measures to prevent multiple failed authentication attempts within in a short time frame, making it more susceptible to brute force attacks...

PT-2019-15306

Name of the Vulnerable Software and Affected Versions Omron CS series PLCs affected versions not specified Omron CJ series PLCs affected versions not specified Description The issue concerns an unrestricted externally accessible lock vulnerability. Recommendations For Omron CS series PLCs, at the...

Access Control Error Vulnerability in Omron PLC CJ and CS Series

Omron PLC CJ and CS series are PLCs from Omron. A security vulnerability exists in the Omron PLC CJ and CS Series that can be exploited by an attacker to access unrestricted locks...

Omron PLC CJ and CS Series Command Execution Vulnerability

Omron PLC CJ and CS series are PLCs from Omron. A security vulnerability exists in the Omron PLC CJ and CS Series that can be exploited by an attacker to spoof arbitrary messages or execute commands...

Omron PLC CJ and CS Series Replay Verification Bypass Vulnerability

Omron PLC CJ and CS series are PLCs from Omron. A replay authentication bypass vulnerability exists in the Omron PLC CJ and CS Series, which can be exploited by an attacker to perform an authentication bypass by over-capturing replay...

Omron PLC CJ/CS/NJ Series CVE-2019-18261 Authentication Bypass Vulnerability

Description Omron PLC CJ, CS and NJ Series are prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and aid in brute-force attacks; other attacks may also be possible. The following products of Omron Programmable Logic...

Omron PLC CJ/CS Series ICSA-19-346-02 Multiple Security Vulnerabilities

Description Omron PLC CJ and CS Series are prone to multiple security vulnerabilities. An attacker may leverage these issues to bypass the authentication mechanism and gain unauthorized access to the affected application. The following products of Omron Programmable Logic Controllers are affected...

Omron PLC CJ, CS and NJ Series

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Omron Equipment : PLC CJ, CS and NJ Series Vulnerability : Improper Restriction of Excessive Authentication Attempts 2. RISK EVALUATION Successful exploitation of this vulnerability could allow...

Omron PLC CJ and CS Series

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Omron Equipment : PLC CJ and CS Series Vulnerabilities : Authentication Bypass by Spoofing, Authentication Bypass by Capture-replay, Unrestricted Externally Accessible Lock 2. UPDATE This updated...

OMRON CX-Supervisor Vulnerable Third-Party Component Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Teamviewer tha...

Omron PLC 1.0.0 - Denial of Service Exploit

Exploit Title: Omron PLC 1.0.0 - Denial of Service PoC Exploit Author: n0b0dy Vendor Homepage: https://automation.omron.com, ia.omron.com Software Link: n/a Version: 1.0.0 Tested on: PLC f/w rev.: CJ2M v2.01 CWE-412 : Unrestricted Externally Accessible Lock CVE : n/a !usr/bin/python...