CVE-2019-18261

Name of the Vulnerable Software and Affected Versions Omron PLC CS series, all versions Omron PLC CJ series, all versions Omron PLC NJ series, all versions

Description The software does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

Recommendations For Omron PLC CS series, all versions, implement rate limiting or account lockout policies to prevent brute force attacks. For Omron PLC CJ series, all versions, consider adding a time delay between failed login attempts to slow down the attack process. For Omron PLC NJ series, all versions, restrict access to the authentication mechanism to minimize the risk of exploitation.