CVE-2015-1015: Infoleak
Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 use a reversible format for password storage in object files on Compact Flash cards, which makes it easier for local users to obtain sensitive information by reading a file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1015?
CVE-2015-1015 is classified as a high severity vulnerability due to the risk of unauthorized access to sensitive information.
How do I fix CVE-2015-1015?
To mitigate CVE-2015-1015, upgrade to Omron CX-One CX-Programmer version 9.6 or later, CJ2M PLC devices version 2.1 or later, and CJ2H PLC devices version 1.5 or later.
What types of devices are affected by CVE-2015-1015?
CVE-2015-1015 affects Omron CX-Programmer prior to version 9.6, CJ2M PLC devices prior to version 2.1, and CJ2H PLC devices prior to version 1.5.
What does CVE-2015-1015 allow attackers to do?
CVE-2015-1015 allows local users to retrieve sensitive information due to the reversible format of password storage in object files.
Is there a workaround for CVE-2015-1015?
A workaround for CVE-2015-1015 is to limit physical access to the Compact Flash cards and monitor user permissions.