Vulnerability Details CVE-2015-0987
Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 rely on cleartext password transmission, which allows remote attackers to obtain sensitive information by sniffing the network during a PLC unlock request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.5%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2015-0987
-
cpe:2.3:a:omron:cx-programmer:-
-
cpe:2.3:h:omron:cj2h_plc:*
-
cpe:2.3:h:omron:cj2m_plc:*