Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2811▲ 64 respecto a la semana anterior
Críticas / altas1484▲ 296 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)68▼ 448 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 0.97% | — | Omron Sysmac CS1 FirmwareOmron Sysmac Cj2m FirmwareOmron Sysmac Cj2h FirmwareOmron Sysmac Cp1e Firmware+3 | 26/7/2022 | 17/6/2026 | The Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18 lack cryptographic authentication. They utilize the Omron FINS (9600/TCP) protocol for engineering purposes, including downloading projects and control logic to the PLC. This protocol has authentication flaws as reported… | |
| Modificada | Alta (7.5) | 0.66% | — | Omron Sysmac CS1 FirmwareOmron Sysmac Cj2m FirmwareOmron Sysmac Cj2h FirmwareOmron Sysmac Cp1e Firmware+3 | 26/7/2022 | 17/6/2026 | In Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to the Web UI is stored in memory area D1449...D1452 and can be read out using the Omron FINS protocol without any further authentication. | |
| Modificada | Alta (7.5) | 0.65% | — | Omron Sysmac CS1 FirmwareOmron Sysmac Cj2m FirmwareOmron Sysmac Cj2h FirmwareOmron Sysmac Cp1e Firmware+4 | 26/7/2022 | 17/6/2026 | Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or system integrators to configure a password in order to restrict sensitive engineering operations (such as project/logic uploads and downloads). This password is set using… |