description:
Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability.
problem types: CWE-412 Unrestricted Externally Accessible Lock
affected:
{
defaultStatus: unaffected
product: Omron PLC CJ Series
vendor: Omron
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Omron PLC CS series
vendor: Omron
versions:
status: affected, version: all versions
}
{
defaultStatus: unaffected
product: Omron PLC NX1P2 series
vendor: Omron
versions:
status: affected, version: all versions
}
workarounds:
Omron recommends the following mitigation measures:
*  Filter FINS port: Protect access to Omron’s PLC with a firewall and blocking unnecessary remote access to FINS port (default: 9600).
*  Filter IP addresses: Protect access to Omron’s PLC with a firewall and filtering devices connected to the PLC by IP address.
For more information provided by Omron on these vulnerabilities refer to  Vulnerabilities in Omron CS and CJ series CPU PLCs https://gcc01.safelinks.protection.outlook.com/ .