PT-2019-15303 · Omron · Omron Plc Cj Series

Published 2019-12-16 · Updated 2019-12-27 · CVE-2019-18261

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Omron PLC CS series, all versions Omron PLC CJ series, all versions Omron PLC NJ series, all versions

Description The software does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

Recommendations For Omron PLC CS series, all versions, implement rate limiting or account lockout policies to prevent brute force attacks. For Omron PLC CJ series, all versions, consider adding a time delay between failed login attempts to slow down the attack process. For Omron PLC NJ series, all versions, restrict access to the authentication mechanism to minimize the risk of exploitation.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2019-18261

Affected Products

Omron Plc Cj Series

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-18261 · Security Note
• https://us-cert.gov/ics/advisories/icsa-19-346-03 · Note