CVE-2015-1015

Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 use a reversible format for password storage in object files on Compact Flash cards, which makes it easier for local users to obtain sensitive information by reading a file.

Score

CVSS 2.0 2.1 Low

Status

Modified - ics-cert@hq.dhs.gov

Published

2015-10-06

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Cj2h Plc (Omron)
• Cj2m Plc (Omron)
• Cx-programmer (Omron)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-15-274-01