CVE-2019-13533 Other in Omron PLC CJ and CS Series
Attackers can replay network traffic to manipulate industrial valves in Omron PLCs, requiring network access to the control system.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-13533?
CVE-2019-13533 is a high-severity vulnerability in Omron PLC CJ and CS Series, published on 16 Dec 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and replay requests that could result in the opening and closing of industrial valves.
Weakness: CWE-294
Which versions are affected by CVE-2019-13533?
It affects 2 products.
Products include Omron Plc Cj Firmware, Omron Plc Cs Firmware.
How do I fix CVE-2019-13533?
No fix has been published for CVE-2019-13533 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-13533 being exploited?
There is no known exploitation of CVE-2019-13533 in the wild and no public exploit code.
Other vulnerabilities in Omron PLC CJ and CS Series
Sources
Also known as GHSA-rp7w-4xxf-cq5w.