CVE-2019-18259 Other in Omron PLC CJ and CS Series
Attackers can spoof messages or execute commands on Omron PLC CJ and CS series devices, compromising industrial control operations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-18259?
CVE-2019-18259 is a critical vulnerability in Omron PLC CJ and CS Series, published on 16 Dec 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary messages or execute commands.
Weakness: CWE-290
Which versions are affected by CVE-2019-18259?
It affects 2 products.
Products include Omron Plc Cj Firmware, Omron Plc Cs Firmware.
How do I fix CVE-2019-18259?
No fix has been published for CVE-2019-18259 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-18259 being exploited?
There is no known exploitation of CVE-2019-18259 in the wild and no public exploit code.
Other vulnerabilities in Omron PLC CJ and CS Series
Sources
Also known as GHSA-jwh5-53wq-83vf.