Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2015-0987

EPSS 0.53% · P67
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2015-0987

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 rely on cleartext password transmission, which allows remote attackers to obtain sensitive information by sniffing the network during a PLC unlock request.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
多款Omron产品信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Omron CX-One CX-Programmer、CJ2M PLC和CJ2H PLC都是日本Omron公司的产品。CX-Programmer是CX-One软件套件中的一套用来配置可编程设备的程序。CJ2M PLC和CJ2H PLC分别是CJ2M系列和CJ2H系列的可编程逻辑控制器产品(PLC)。 多款Omron产品中存在安全漏洞,该漏洞源于程序传输明文的密码。远程攻击者可通过在发送PLC解锁请求期间嗅探网络利用该漏洞获取敏感信息。以下产品及版本受到影响:Omron CX-One CX-Programm
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2015-0987

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-0987

Please Login to view more intelligence information

Same Patch Batch · n/a · 2015-10-03 · 24 CVEs total

CVE-2015-1015多款Omron设备信息泄露漏洞
CVE-2015-7686Perl Email-Address模块资源管理错误漏洞
CVE-2015-7314Gollum Precious模块信息泄露漏洞
CVE-2015-6549Symantec NetBackup OpsCenter 跨站脚本漏洞
CVE-2015-5650AjaXplorer 目录遍历漏洞
CVE-2015-5645ICZ MATCHA SNS 权限许可和访问控制漏洞
CVE-2015-5644ICZ MATCHA SNS 代码注入漏洞
CVE-2015-5643ICZ MATCHA INVOICE 代码注入漏洞
CVE-2015-5642ICZ MATCHA INVOICE SQL注入漏洞
CVE-2015-5641baserCMS SQL注入漏洞
CVE-2015-5640baserCMS 权限许可和访问控制问题漏洞
CVE-2015-3938Mitsubishi Electric MELSEC FX3G PLC设备资源管理错误漏洞
CVE-2014-8916IBM OpenPages GRC Platform 跨站脚本漏洞
CVE-2015-0988Omron CX-One CX-Programmer 信息泄露漏洞
CVE-2015-5651Dotclear 跨站脚本漏洞
CVE-2015-4955IBM Business Process Manager 跨站脚本漏洞
CVE-2015-1888IBM Content Navigator 跨站脚本漏洞
CVE-2015-0195IBM Content Template Catalog for WebSphere Portal 跨站脚本漏洞
CVE-2015-0145IBM OpenPages GRC Platform 跨站请求伪造漏洞
CVE-2015-0144IBM OpenPages GRC Platform 跨站脚本漏洞

Showing top 20 of 24 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2015-0987

No comments yet


Leave a comment