CVE-2019-13533

State: Published
Severity: 8.1 High
Published: Dec 16, 2019
Updated: Jun 2, 2026
Reserved: Jul 11, 2019

Description

In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and replay requests that could result in the opening and closing of industrial valves.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H	CISA-ADP

Weaknesses

CWE-294 AUTHENTICATION BYPASS BY CAPTURE-REPLAY CWE-294

Affected Products

Product	Versions
Omron PLC CJ and CS Seriesn/a	Omron PLC CJ series, all versions, Omron PLC CS series, all versionsAffected

References

https://www.us-cert.gov/ics/advisories/icsa-19-346-02

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.