critical
9.8
CWE
347
Advisory Published
Updated

CVE-2022-31206

First published: Tue Jul 26 2022(Updated: )

The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software (which compiles IEC 61131-3 conformant POU code to native machine code for execution by the PLC's runtime). The resulting machine code is executed by a runtime, typically controlled by a real-time operating system. The logic that is downloaded to the PLC does not seem to be cryptographically authenticated, allowing an attacker to manipulate transmitted object code to the PLC and execute arbitrary machine code on the processor of the PLC's CPU module in the context of the runtime. In the case of at least the NJ series, an RTOS and hardware combination is used that would potentially allow for memory protection and privilege separation and thus limit the impact of code execution. However, it was not confirmed whether these sufficiently segment the runtime from the rest of the RTOS.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Omron Nx701-1600 Firmware<1.29
Omron Nx701-1600
Omron Nx701-1620 Firmware<1.29
Omron Nx701-1620
Omron Nx701-1700 Firmware<1.29
Omron Nx701-1700
Omron Nx701-1720 Firmware<1.29
Omron Nx701-1720
Omron Nx701-z600 Firmware<1.29
Omron Nx701-z600
Omron Nx701-z700 Firmware<1.29
Omron Nx701-z700
Omron Nj101-1000 Firmware<1.49
Omron Nj101-1000
Omron Nj101-1020 Firmware<1.49
Omron Nj101-1020
Omron Nj101-9000 Firmware<1.49
Omron Nj101-9000
Omron Nj101-9020 Firmware<1.49
Omron Nj101-9020
Omron Nj301-1100 Firmware<1.49
Omron Nj301-1100
Omron Nj301-1200 Firmware<1.49
Omron Nj301-1200
Omron Nj501-1300 Firmware<1.49
Omron Nj501-1300
Omron Nj501-1320 Firmware<1.49
Omron Nj501-1320
Omron Nj501-1340 Firmware<1.49
Omron Nj501-1340
Omron Nj501-1400 Firmware<1.49
Omron Nj501-1400
Omron Nj501-1420 Firmware<1.49
Omron Nj501-1420
Omron Nj501-1500 Firmware<1.49
Omron Nj501-1500
Omron Nj501-1520 Firmware<1.49
Omron Nj501-1520
Omron Nj501-4300 Firmware<1.49
Omron Nj501-4300
Omron Nj501-4320 Firmware<1.49
Omron Nj501-4320
Omron Nj501-4400 Firmware<1.49
Omron Nj501-4400
Omron Nj501-4500 Firmware<1.49
Omron Nj501-4500
Omron Nj501-5300 Firmware<1.49
Omron Nj501-5300
Omron Nj501-5300-1 Firmware<1.49
Omron Nj501-5300-1
Omron SYSMAC CS1<4.1
4.1
Omron SYSMAC CJ2M<2.1
2.1
Omron SYSMAC CJ2H<1.5
1.5
Omron SYSMAC CP1E/CP1H<1.30
1.30
Omron SYSMAC CP1L<1.10
1.10
Omron CP1W-CIF41
Omron SYSMAC CX-Programmer<9.6
9.6
Omron SYSMAC NJ/NX Series: Versions prior to 1.49 (1.29 for NX7)

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Frequently Asked Questions

  • What is CVE-2022-31206?

    CVE-2022-31206 is a vulnerability in the Omron SYSMAC Nx product family PLCs that lack cryptographic authentication.

  • What is the severity of CVE-2022-31206?

    CVE-2022-31206 has a severity rating of 9.8, which is classified as critical.

  • How does CVE-2022-31206 affect the Omron SYSMAC Nx PLCs?

    CVE-2022-31206 affects the Omron SYSMAC Nx PLCs by exposing them to the risk of unauthorized access due to the lack of cryptographic authentication.

  • Which Omron SYSMAC Nx PLCs are affected by CVE-2022-31206?

    The Omron SYSMAC Nx PLCs that are affected by CVE-2022-31206 include the NJ series, NY series, NX series, and PMAC series.

  • How can I mitigate the vulnerability CVE-2022-31206?

    To mitigate the vulnerability CVE-2022-31206, it is recommended to implement cryptographic authentication measures on the affected Omron SYSMAC Nx PLCs and update the firmware to the version that addresses this vulnerability.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203