Lucene search
IcscertCVE-2015-0987HistoryOct 06, 2015 - 1:59 a.m.
CVE-2015-0987
2015-10-0601:59:03
CWE-200
icscert
web.nvd.nist.gov
35
cve-2015-0987
omron cx-one
cx-programmer
plc
cleartext password transmission
remote attackers
sensitive information
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.003
Percentile
65.9%
Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 rely on cleartext password transmission, which allows remote attackers to obtain sensitive information by sniffing the network during a PLC unlock request.
Affected configurations
Node
omroncx-programmerRange≤9.5
ORomroncj2h_plcRange≤1.4
ORomroncj2m_plcRange≤2.0
Related
prion
prion
Design/Logic Flaw
2015-10-06 01:59:00
cvelist
cvelist
CVE-2015-0987
2015-10-03 10:00:00
nessus
nessus
nvd
nvd
CVE-2015-0987
2015-10-06 01:59:03
ics
ics
Omron Multiple Product Vulnerabilities
2019-01-31 12:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.003
Percentile
65.9%
Related for CVE-2015-0987