Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-31206

EPSS 0.24% · P48
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-31206

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software (which compiles IEC 61131-3 conformant POU code to native machine code for execution by the PLC's runtime). The resulting machine code is executed by a runtime, typically controlled by a real-time operating system. The logic that is downloaded to the PLC does not seem to be cryptographically authenticated, allowing an attacker to manipulate transmitted object code to the PLC and execute arbitrary machine code on the processor of the PLC's CPU module in the context of the runtime. In the case of at least the NJ series, an RTOS and hardware combination is used that would potentially allow for memory protection and privilege separation and thus limit the impact of code execution. However, it was not confirmed whether these sufficiently segment the runtime from the rest of the RTOS.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Omron SYSMAC CS/CJ/CP Series 和 NJ/NX Series 数据伪造问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Omron SYSMAC CS/CJ/CP Series和Omron SYSMAC NJ/NX Series都是日本Omron公司的产品。Omron SYSMAC CS/CJ/CP Series是一系列可编程控制器。Omron SYSMAC NJ/NX Series是一系列机械自动化控制器。 Omron SYSMAC 多款产品存在数据伪造问题漏洞，该漏洞源于数据真实性验证不足。攻击者利用该漏洞可操纵传输到 PLC 的目标代码，并在 SYSMAC NJ/NX 系列控制器的 PLC CPU 模块的处理器上执行
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2022-31206

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-31206

请登录查看更多情报信息。

Same Patch Batch · n/a · 2022-07-26 · 67 CVEs total

CVE-2021-33459yasm 代码问题漏洞
CVE-2021-33440Cesanta MJS 代码问题漏洞
CVE-2021-33441Cesanta MJS 代码问题漏洞
CVE-2021-33442Cesanta MJS 代码问题漏洞
CVE-2021-33453lrzip 资源管理错误漏洞
CVE-2021-33454yasm 代码问题漏洞
CVE-2021-33455yasm 代码问题漏洞
CVE-2021-33456yasm 代码问题漏洞
CVE-2021-33457yasm 代码问题漏洞
CVE-2021-33458yasm 代码问题漏洞
CVE-2021-33452lrzip 安全漏洞
CVE-2021-33460yasm 代码问题漏洞
CVE-2021-33468yasm 资源管理错误漏洞
CVE-2021-33467yasm 资源管理错误漏洞
CVE-2021-33466yasm 代码问题漏洞
CVE-2021-33465yasm 代码问题漏洞
CVE-2021-33464yasm 缓冲区错误漏洞
CVE-2021-33463yasm 代码问题漏洞
CVE-2021-33462yasm 资源管理错误漏洞
CVE-2021-33461yasm 资源管理错误漏洞

Showing top 20 of 67 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2022-31206

No comments yet

Leave a comment