CVE-2022-31206

https://notcve.org/view.php?id=CVE-2022-31206

26 Jul 2022 — The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software (which compiles IEC 61131-3 conformant POU code to native machine code for execution by the PLC's runtime). The resulting machine code is executed by a runtime, typically controlled by a real-time operating system. The logic that is downloaded to the PLC does not seem to be cryptographically aut... • https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-02 • CWE-347: Improper Verification of Cryptographic Signature •