FINS Protocol Brute Force

The vulnerability of the FINS protocol implementation in Omron programmable logic controllers of the CJ/CS/CP series is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a malicious actor to execute a brute-force attack remotely...

Omron PLC CJ series access control error vulnerability

The Omron PLC CJ series is a CJ series programmable logic controller PLC from Omron Japan. An Access Control Error vulnerability exists in Omron CJ1M PLC v4.0 and earlier versions, which arises from incorrect access control to a memory area where the UM password is stored...

Omron CP1L-EL20DR-D security vulnerability

The Omron CP1L-EL20DR-D is a programmable controller from Omron Japan. A security vulnerability exists in the Omron CP1L-EL20DR-D. An attacker could exploit the vulnerability to cause unspecified commands in the FINS protocol to be executed without authentication...

CX-Programmers Password Transmission

The vulnerability of the development environment CX-Programmer, which is part of the CX-One software suite designed for programming and configuring Omron PLCs, as well as Omron microcontrollers like CJ2M and CJ2H, stems from the transmission of passwords in an open manner. Exploiting this...