CVE-2019-13533CWE-294

In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and replay…

High · published December 16, 2019

CVSS v3.1
8.1
EPSS
1%
Percentile
58.5
In the wild
Unconfirmed
What it is

In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and replay requests that could result in the opening and closing of industrial valves.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00873 · 58.5th percentile
Weakness
CWE-294 · Authentication Bypass by Capture-replay
Published
2019-12-16T19:25Z
EPSS history
Timeline
  • 16 DEC 19:25Z
    In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and replay…
    cvelistv5