---
cve: "CVE-2015-0987"
severity: "CRITICAL"
cvss: 10.0
epss: "1.2%"
vendor: "n/a"
kev: false
exploited: false
published: "2015-10-06 01:59:03"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-10-23T10:32:30+02:00"
---

# CVE-2015-0987

> 10.0 CRITICAL

## Beschreibung

Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 rely on cleartext password transmission, which allows remote attackers to obtain sensitive information by sniffing the network during a PLC unlock request.

## CNA-Record (Kanon, cvelistV5)

- CNA: **icscert**
- State: PUBLISHED
- Stand: 2026-06-02 19:48:51

## CISA-Anreicherung (vulnrichment/ADP)

- CISA-SSVC (Coordinator, v2.0.3):
  - Exploitation: **none**
  - Automatable: **yes**
  - Technical Impact: **partial**

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Verändert | bad |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Gering | warn |
| A Verfügbarkeit | Hoch | bad |

## Schwachstellen-Klasse

- **CWE-319** — Cleartext Transmission of Sensitive Information
  The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

## Angriffsmuster (CAPEC)

- [CAPEC-65 — Sniff Application Code](https://capec.mitre.org/data/definitions/65.html) _(Severity: High)_
- [CAPEC-102 — Session Sidejacking](https://capec.mitre.org/data/definitions/102.html) _(Severity: High)_
- [CAPEC-117 — Interception](https://capec.mitre.org/data/definitions/117.html) _(Severity: Medium)_
- [CAPEC-383 — Harvesting Information via API Event Monitoring](https://capec.mitre.org/data/definitions/383.html) _(Severity: Low)_
- [CAPEC-477 — Signature Spoofing by Mixing Signed and Unsigned Content](https://capec.mitre.org/data/definitions/477.html) _(Severity: High)_

## ATT&CK-Techniken

- [T1040 — Network Sniffing](https://attack.mitre.org/techniques/T1040/)
- [T1056.004 — Input Capture: Credential API Hooking](https://attack.mitre.org/techniques/T1056/004/)

## Referenzen

- <https://ics-cert.us-cert.gov/advisories/ICSA-15-274-01>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2015-0987/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_