PT-2019-13397 · Omron · Omron Plc Cj Series

Publicado 2019-12-16 · Atualizado 2020-01-02 · CVE-2019-13533

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Omron PLC CJ series, all versions Omron PLC CS series, all versions

Description The issue allows an attacker to monitor traffic between the PLC and the controller and replay requests, potentially resulting in the unauthorized opening and closing of industrial valves.

Recommendations For Omron PLC CJ series, all versions: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Omron PLC CS series, all versions: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-294

Identificadores relacionados

CVE-2019-13533

Produtos afetados

Omron Plc Cj Series

Referências · 2

• https://us-cert.gov/ics/advisories/icsa-19-346-02 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-13533 · Nota de Segurança