What is CVE-2015-0987?

CVE-2015-0987 is a critical-severity vulnerability in Omron Cj2h_plc, classified under Information Disclosure. CVSS score: 10.0/10. Published 2015-10-06.

How severe is CVE-2015-0987?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Information disclosure in Omron Cj2h_plc

CVE-2015-0987

Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 rely on cleartext password transmission, which allows remote attackers to obtain sensitive information by sniffing the network during a PLC…

Vulnerability class: Information Disclosure

EPSS: 0.012 (63.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H.

Affected products

Omron Cj2h_plc
Omron Cj2m_plc
Omron Cx-programmer
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure
CWE-319 — Cleartext Transmission of Sensitive Information

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2015-0987?: CVE-2015-0987 is a critical-severity vulnerability in Omron Cj2h_plc, classified under Information Disclosure. CVSS score: 10.0/10. Published 2015-10-06.
How severe is CVE-2015-0987?: Critical severity. CVSS v3 base score is 10.0 out of 10.