ID
VAR-201605-0618
TITLE
OMRON CP1W-C1F41 Module HTTP Service Denial of Service Vulnerability
Trust: 0.6
DESCRIPTION
OMRON CP1H-XA40DT-D is a compact PLC produced by Japan's Omron Corporation and is widely used in manufacturing. CP1W-C1F41 is the Ethernet module of CP1H-XA40DT-D PLC. There is a denial of service vulnerability in the HTTP protocol of the CP1W-C1F41 module. After the client establishes a link with port 80 of CP1W-C1F41 and sends an exception string ":" to it (note: there is a space after the colon), it can cause the HTTP service of CP1W-C1F41 to be abnormal and port 80 can no longer be accessed. The PLC needs to be restarted manually before HTTP service can recover
Trust: 0.72
IOT TAXONOMY
| category: | ['ICS', 'Network device'] | sub_category: | - | Trust: 0.6 |
| category: | ['ICS'] | sub_category: | - | Trust: 0.2 |
AFFECTED PRODUCTS
| vendor: | omron | model: | cp1h-xa40dt-d | scope: | eq | version: | 1.2 | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
TYPE
Denial of service
Trust: 0.2
EXTERNAL IDS
| db: | CNVD | id: | CNVD-2016-03455 | Trust: 0.8 |
| db: | IVD | id: | EB198F37-BE9D-4DA5-BBF2-9007778E35FB | Trust: 0.2 |
SOURCES
| db: | IVD | id: | eb198f37-be9d-4da5-bbf2-9007778e35fb |
| db: | CNVD | id: | CNVD-2016-03455 |
LAST UPDATE DATE
2022-05-17T01:43:18.915000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2016-03455 | date: | 2016-12-24T00:00:00 |
SOURCES RELEASE DATE
| db: | IVD | id: | eb198f37-be9d-4da5-bbf2-9007778e35fb | date: | 2016-05-24T00:00:00 |
| db: | CNVD | id: | CNVD-2016-03455 | date: | 2016-06-21T00:00:00 |