Omron CP1W-CIF41 Firmware vulnerabilities

4 CVEs affecting Omron CP1W-CIF41 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-27396, published 2023-06-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-27396, published 2023-06-19. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks composed of OMRON…
CVE-2022-31207, published 2022-07-26. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. The Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18 lack cryptographic authentication. They utilize the Omron FINS (9600/TCP) protocol for engineering…
CVE-2022-31205, published 2022-07-26. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. In Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to the Web UI is stored in memory area D1449...D1452 and can be read out using the Omron FINS protocol…
CVE-2022-31204, published 2022-07-26. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or system integrators to configure a password in…