PT-2019-13397 · Omron · Omron Plc Cj Series

Published 2019-12-16 · Updated 2020-01-02 · CVE-2019-13533

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Omron PLC CJ series, all versions Omron PLC CS series, all versions

Description The issue allows an attacker to monitor traffic between the PLC and the controller and replay requests, potentially resulting in the unauthorized opening and closing of industrial valves.

Recommendations For Omron PLC CJ series, all versions: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Omron PLC CS series, all versions: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-294

Related Identifiers

CVE-2019-13533

Affected Products

Omron Plc Cj Series

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-13533 · Security Note
• https://us-cert.gov/ics/advisories/icsa-19-346-02 · Note