Description
Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 use a reversible format for password storage in object files on Compact Flash cards, which makes it easier for local users to obtain sensitive information by reading a file.
References (1)
Core 1
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-15-274-01
Scores
EPSS
0.0040
EPSS Percentile
32.1%
Details
CWE
CWE-200
Status
published
Products (3)
omron/cj2h_plc
1.4
omron/cj2m_plc
2.0
omron/cx-programmer
9.5
Published
Oct 06, 2015
Tracked Since
Feb 18, 2026