CVE-2022-31204 - CVE House
Back to Database
Status published High CVE-2022-31204

Omron CS series, CJ series, and CP series PLCs through...

Vulnerability Description

Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or system integrators to configure a password in order to restrict sensitive engineering operations (such as project/logic uploads and downloads). This password is set using the OMRON FINS command Program Area Protect and unset using the command Program Area Protect Clear, both of which are transmitted in cleartext.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-31204

Credits & Attribution

No credits recorded in the NVD database.

References

More from omron

View All →
CVE-2022-31207
The Omron SYSMAC Cx product family PLCs (CS series, CJ...
Critical 9.8
CVE-2022-31206
The Omron SYSMAC Nx product family PLCs (NJ series, NY...
Critical 9.8
CVE-2022-31205
In Omron CS series, CJ series, and CP series PLCs...
High 7.5
CVE-2018-6624
OMRON NS devices 1.1 through 1.3 allow remote attackers to...
Critical 9.8
CVE-2015-1015
Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1,...
Low 2.1

Affected Vendor

Affected Software

sysmac cs1 firmware, sysmac cj2m firmware, sysmac cj2h firmware, sysmac cp1e firmware, sysmac cp1h firmware, sysmac cp1l firmware, cp1w-cif41 firmware, cx-programmer
Vulnerable Versions:
0

Timeline

Official Publish: July 26th, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.