CVEvulnerability

CVE-2015-0987

10.0 CRITICAL Published 2015-10-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-10-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200, CWE-319

Description

Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 rely on cleartext password transmission, which allows remote attackers to obtain sensitive information by sniffing the network during a PLC unlock request.

Affected configurations

• omron cx-programmer (<= 9.5) • omron cj2h plc (<= 1.4) • omron cj2m plc (<= 2.0)

Related

Weakness · CWE (2)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-319 Cleartext Transmission of Sensitive Information weakness

References