1. Home
  2. CVE Database
  3. CVE-2022-31206
CRITICAL · 9.8

CVE-2022-31206

The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engin...

Vulnerability Description

The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software (which compiles IEC 61131-3 conformant POU code to native machine code for execution by the PLC's runtime). The resulting machine code is executed by a runtime, typically controlled by a real-time operating system. The logic that is downloaded to the PLC does not seem to be cryptographically authenticated, allowing an attacker to manipulate transmitted object code to the PLC and execute arbitrary machine code on the processor of the PLC's CPU module in the context of the runtime. In the case of at least the NJ series, an RTOS and hardware combination is used that would potentially allow for memory protection and privilege separation and thus limit the impact of code execution. However, it was not confirmed whether these sufficiently segment the runtime from the rest of the RTOS.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
OmronNx701-1600 Firmware< 1.29
OmronNx701-1600-
OmronNx701-1620 Firmware< 1.29
OmronNx701-1620-
OmronNx701-1700 Firmware< 1.29
OmronNx701-1700-
OmronNx701-1720 Firmware< 1.29
OmronNx701-1720-
OmronNx701-Z600 Firmware< 1.29
OmronNx701-Z600-
OmronNx701-Z700 Firmware< 1.29
OmronNx701-Z700-
OmronNj101-1000 Firmware< 1.49
OmronNj101-1000-
OmronNj101-1020 Firmware< 1.49
OmronNj101-1020-
OmronNj101-9000 Firmware< 1.49
OmronNj101-9000-
OmronNj101-9020 Firmware< 1.49
OmronNj101-9020-

Related Weaknesses (CWE)

CWE-347

References

FAQ

What is CVE-2022-31206?

CVE-2022-31206 is a vulnerability with a CVSS score of 9.8 (CRITICAL). The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engin...

How severe is CVE-2022-31206?

CVE-2022-31206 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2022-31206?

Check the references section above for vendor advisories and patch information. Affected products include: Omron Nx701-1600 Firmware, Omron Nx701-1600, Omron Nx701-1620 Firmware, Omron Nx701-1620, Omron Nx701-1700 Firmware.