High severity · published Jul 26, 2022
CVE-2022-31205
In Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to the Web UI is stored in memory area D1449...D1452 and can be read out using the…
7.5
CVSS
0.7%
EPSS
No
On KEV
Description
In Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to the Web UI is stored in memory area D1449...D1452 and can be read out using the Omron FINS protocol without any further authentication.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Cp1w-cif41 Firmware · Omron
All versions, or not specified · source: NVD
SC
Sysmac Cj2h Firmware · Omron
before 1.5 · source: NVD
SC
Sysmac Cj2m Firmware · Omron
before 2.1 · source: NVD
SC
Sysmac Cp1e Firmware · Omron
before 1.30 · source: NVD
SC
Sysmac Cp1h Firmware · Omron
before 1.30 · source: NVD
SC
Sysmac Cp1l Firmware · Omron
before 1.10 · source: NVD
SC
Sysmac Cs1 Firmware · Omron
before 4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-31205
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-31205
Third Party Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-02
Third Party Advisory
https://www.forescout.com/blog/
More from Cp1w-cif41 Firmware
9.8
CVE-2022-31207
The Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18 lack cryptographic authentication
7.5
CVE-2022-31204
Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords