1. Home
  2. CVE Database
  3. CVE-2022-31204
HIGH · 7.5

CVE-2022-31204

Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or system integrators to configure a password in order...

Vulnerability Description

Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or system integrators to configure a password in order to restrict sensitive engineering operations (such as project/logic uploads and downloads). This password is set using the OMRON FINS command Program Area Protect and unset using the command Program Area Protect Clear, both of which are transmitted in cleartext.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
OmronSysmac Cs1 Firmware< 4.1
OmronSysmac Cs1-
OmronSysmac Cj2M Firmware< 2.1
OmronSysmac Cj2M-
OmronSysmac Cj2H Firmware< 1.5
OmronSysmac Cj2H-
OmronSysmac Cp1E Firmware< 1.30
OmronSysmac Cp1E-
OmronSysmac Cp1H Firmware< 1.30
OmronSysmac Cp1H-
OmronSysmac Cp1L Firmware< 1.10
OmronSysmac Cp1L-
OmronCp1W-Cif41 Firmware-
OmronCp1W-Cif41-
OmronCx-Programmer< 9.6

Related Weaknesses (CWE)

CWE-319

References

FAQ

What is CVE-2022-31204?

CVE-2022-31204 is a vulnerability with a CVSS score of 7.5 (HIGH). Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or system integrators to configure a password in order...

How severe is CVE-2022-31204?

CVE-2022-31204 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-31204?

Check the references section above for vendor advisories and patch information. Affected products include: Omron Sysmac Cs1 Firmware, Omron Sysmac Cs1, Omron Sysmac Cj2M Firmware, Omron Sysmac Cj2M, Omron Sysmac Cj2H Firmware.