What’s Vulnerable › Vulnerabilities

CVE-2015-1015

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-10-06 · updated 2026-06-17
• Weakness: CWE-200

Description

Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 use a reversible format for password storage in object files on Compact Flash cards, which makes it easier for local users to obtain sensitive information by reading a file.

Affected products

• Omron Cj2H Plc: 1.4
• Omron Cj2M Plc: 2.0
• OMRON Corporation CX-Programmer: 9.5

References

• https://ics-cert.us-cert.gov/advisories/ICSA-15-274-01
• https://ics-cert.us-cert.gov/advisories/ICSA-15-274-01

Get alerted when CVE-2015-1015 or the next vulnerability affects your stack