Omron Sysmac CJ2M Firmware vulnerabilities

3 CVEs affecting Omron Sysmac CJ2M Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-31207, published 2022-07-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-31207, published 2022-07-26. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. The Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18 lack cryptographic authentication. They utilize the Omron FINS (9600/TCP) protocol for engineering…
CVE-2022-31205, published 2022-07-26. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. In Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to the Web UI is stored in memory area D1449...D1452 and can be read out using the Omron FINS protocol…
CVE-2022-31204, published 2022-07-26. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or system integrators to configure a password in…