PT-2019-15302 · Omron · Omron Plc Cj Series

Jipeng You + 1 · Published 2019-12-16 · Updated 2019-12-27 · CVE-2019-18259

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Omron PLC CJ series, all versions Omron PLC CS series, all versions

Description The issue allows an attacker to spoof arbitrary messages or execute commands.

Recommendations For Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2019-18259

Affected Products

Omron Plc Cj Series

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-18259 · Security Note
• https://us-cert.gov/ics/advisories/icsa-19-346-02 · Note