Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or system integrators to configure a password in order to restrict sensitive engineering operations (such as project/logic uploads and downloads). This password is set using the OMRON FINS command Program Area Protect and unset using the command Program Area Protect Clear, both of which are transmitted in cleartext.

Threat-Mapped Scoring

Score: 3.0

Priority: P2 - Serious (High)

• S1 – Steal Customer Account Information

EPSS

Score: 0.00105
Percentile: 0.29362

CVSS Scoring

Mapped CWE(s)

• CWE-319 : Cleartext Transmission of Sensitive Information

All CAPEC(s)

CAPEC(s) with Mapped TTPs

Mapped ATT&CK TTPs

• T1056.004 : Credential API Hooking
  Kill Chain: collection
• T1040 : Network Sniffing
  Kill Chain: credential-access

Malware

APTs Threat Group Associations

Campaigns

Affected Products

• cpe:2.3:o:omron:sysmac_cs1_firmware:*:*:*:*:*:*:*:*
• cpe:2.3:o:omron:sysmac_cj2m_firmware:*:*:*:*:*:*:*:*
• cpe:2.3:o:omron:sysmac_cj2h_firmware:*:*:*:*:*:*:*:*
• cpe:2.3:o:omron:sysmac_cp1e_firmware:*:*:*:*:*:*:*:*
• cpe:2.3:o:omron:sysmac_cp1h_firmware:*:*:*:*:*:*:*:*
• cpe:2.3:o:omron:sysmac_cp1l_firmware:*:*:*:*:*:*:*:*
• cpe:2.3:o:omron:cp1w-cif41_firmware:-:*:*:*:*:*:*:*
• cpe:2.3:a:omron:cx-programmer:*:*:*:*:*:*:*:*

← Back to Home