CVE-2022-31205

In Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to the Web UI is stored in memory area D1449...D1452 and can be read out using the Omron FINS protocol without any further authentication...

CVE-2019-18259

In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary messages or execute commands...

EUVD-2020-28126

Malware in sbrugna...

EUVD-2019-8061

Malware in sbrugna...

EUVD-2023-42519

Malicious code in bioql PyPI...

EUVD-2022-48650

Malicious code in bioql PyPI...

CVE-2023-38744

Denial-of-service DoS vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product receives a packet which is specially...

The vulnerability of the microprogramming software used in programmable logic controllers of the SYSMAC series, CS, CJ, and CP, allows attackers to circumvent existing security restrictions and gain unauthorized access to protected information.

The vulnerability of the microprogramming software used in SYSMAC programmable logic controllers of the CS, CJ, and CP series is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to bypass existing security restrictions and gain unauthorized access t...

CVE-2022-45794

An attacker with network access to the affected PLC CJ-series and CS-series PLCs, all versions may use a network protocol to read and write files on the PLC internal memory and memory card...

Omron CS/CJ Series Missing Authentication For Critical Function (CVE-2022-45794)

Omron CS/CJ series programmable logic controllers are missing authentication for the file system. This could allow an attacker to access the file system via memory card or EM file memory and obtain all available sensitive information. This plugin only works with Tenable.ot. Please visit...

Omron PLC Security Vulnerability

Omron PLC CJ series and so on are products of Omron Japan.Omron PLC CJ series is a CJ series Programmable Logic Controller PLC.Omron PLC CS series is a CS series Programmable Logic Controller PLC.Omron PLC NJ series is a NJ series programmable logic controller. A security vulnerability exists in...

CVE-2022-45794 Omron CJ-series and CS-series unauthenticated filesystem access.

An attacker with network access to the affected PLC CJ-series and CS-series PLCs, all versions may use a network protocol to read and write files on the PLC internal memory and memory card...

CVE-2023-38744

Denial-of-service DoS vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product receives a packet which is specially...

Input validation

Denial-of-service DoS vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product receives a packet which is specially...

CVE-2023-38744

Denial-of-service DoS vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product receives a packet which is specially...

CVE-2023-38744

CVE-2023-38744 affects Omron CJ Series EtherNet/IP components: CJ2M CPU Unit (2.18 or earlier), CJ2H CPU Unit (3.04 or earlier), CS/CJ EtherNet/IP Units CS1W-EIP21 (3.04 or earlier) and CJ1W-EIP21 (3.04 or earlier). Root cause is improper validation of a specific input type in the built-in EtherN...

CVE-2023-38744

Denial-of-service DoS vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product receives a packet which is specially...

OMRON CJ series and CS/CJ Series EtherNet/IT unit vulnerable to Denial-of-Service (DoS)

Overview Denial-of-service DoS vulnerability due to improper validation of specified type of input CWE-1287 issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit provided by OMRON Corporation. OMRON...

PT-2023-26580 · Omron · Cj2H Cpu Unit +2

Name of the Vulnerable Software and Affected Versions: CJ2M CPU Unit versions 2.18 and earlier CJ2H CPU Unit versions 3.04 and earlier CS/CJ Series EtherNet/IP Unit CS1W-EIP21 versions 3.04 and earlier CS/CJ Series EtherNet/IP Unit CJ1W-EIP21 versions 3.04 and earlier Description: A...

Omron CJ Series Security Vulnerability

The Omron CJ series is a series of small programmable controllers from Omron Corporation Japan. A security vulnerability exists in the Omron CJ Series CJ2 CPU unit and the CS/CJ Series EtherNet/IP unit, which results from a lack of proper validation of specified types of inputs...