{"id":"CVE-2019-18269","aliases":["EUVD-2019-8061","GHSA-5xrh-m4jr-pgwp"],"status":"published","title":"In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, the software...","description":"Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0104,"percentile":0.6424,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-412"],"published":"2019-12-16T19:21:31Z","modified":"2026-06-17T02:24:43Z","products":[{"vendor":"omron","product":"omron plc cj series"},{"vendor":"omron","product":"omron plc cs series"},{"vendor":"omron","product":"omron plc nx1p2 series"},{"vendor":"omron","product":"plc_cj_firmware"},{"vendor":"omron","product":"plc_cs_firmware"}],"references":[{"url":"https://www.us-cert.gov/ics/advisories/icsa-19-346-02","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://www.omron-cxone.com/security/2019-12-06_PLC_EN.pdf","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18269"},{"url":"https://github.com/advisories/GHSA-5xrh-m4jr-pgwp"}],"sources":{"cve":[{"id":"CVE-2019-18269","description":"Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability.","status":"published","published":"2019-12-16T19:21:31Z","modified":"2026-06-02T19:50:28.415Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-412"],"updated_at":"2026-11-02T14:32:23.803059Z"}],"euvd":[{"id":"EUVD-2019-8061","description":"Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability.","status":"published","published":"2019-12-16T19:21:31Z","modified":"2026-06-02T19:50:28Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T18:20:55.231104Z"}],"ghsa":[{"id":"GHSA-5xrh-m4jr-pgwp","title":"In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, the software...","description":"In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, the software properly checks for the existence of a lock, but the lock can be externally controlled or influenced by an actor that is outside of the intended sphere of control.","status":"published","published":"2022-05-24T17:03:43Z","modified":"2023-05-06T05:00:43Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-412"],"updated_at":"2026-11-02T14:54:35.04449Z"}],"nvd":[{"id":"CVE-2019-18269","description":"Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability.","status":"published","published":"2019-12-16T20:15:15.773Z","modified":"2026-06-17T02:24:43.713Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-412"],"updated_at":"2026-11-02T14:05:40.258829Z"}]}}