Unknown
CVE-2022-31206
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
CVE-2022-31206
MITRE ATT&CK
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Topic Tags
Description
The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software (which compiles IEC 61131-3 conformant POU code to native machine code for execution by the PLC’s runtime). The resulting machine code is executed by a runtime, typically controlled by a real-time operating system. The logic that is downloaded to the PLC does not seem to be cryptographically authenticated, allowing an attacker to manipulate transmitted object code to the PLC and execute arbitrary machine code on the processor of the PLC’s CPU module in the context of the runtime. In the case of at least the NJ series, an RTOS and hardware combination is used that would potentially allow for memory protection and privilege separation and thus limit the impact of code execution. However, it was not confirmed whether these sufficiently segment the runtime from the rest of the RTOS.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
General Information
Vendors
Products
- nj101-1000 firmware,
- nj101-1020 firmware,
- nj101-9000 firmware,
- nj101-9020 firmware,
- nj301-1100 firmware,
- nj301-1200 firmware,
- nj501-1300 firmware,
- nj501-1320 firmware,
- nj501-1340 firmware,
- nj501-1400 firmware,
- nj501-1420 firmware,
- nj501-1500 firmware,
- nj501-1520 firmware,
- nj501-4300 firmware,
- nj501-4320 firmware,
- nj501-4400 firmware,
- nj501-4500 firmware,
- nj501-5300 firmware,
- nj501-5300-1 firmware,
- nx701-1600 firmware,
- nx701-1620 firmware,
- nx701-1700 firmware,
- nx701-1720 firmware,
- nx701-z600 firmware,
- nx701-z700 firmware
References
Additional Info
Technical Analysis
Report as Emergent Threat Response
Report as Zero-day Exploit
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
