CVE-2015-0987: Infoleak
First published: Sat Oct 03 2015(Updated: )
Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 rely on cleartext password transmission, which allows remote attackers to obtain sensitive information by sniffing the network during a PLC unlock request.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Omron CX-Programmer | <=9.5 | |
| Omron Cj2h Plc | <=1.4 | |
| Omron Cj2m Plc | <=2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/author
- agent/tags
- agent/references
- agent/event
- agent/severity
- agent/weakness
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/omron
- canonical/omron cx-programmer
- version/omron cx-programmer/9.5
- canonical/omron cj2h plc
- version/omron cj2h plc/1.4
- canonical/omron cj2m plc
- version/omron cj2m plc/2.0