CVE-2015-0987

CRITICAL
10.0CVSS v3
5.0CVSS v2
0.74% EPSS (exploit probability)
CWE-200CWE

Description

Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 rely on cleartext password transmission, which allows remote attackers to obtain sensitive information by sniffing the network during a PLC unlock request.

CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references