CVE-2015-1015

Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 use a reversible format for password storage in object files on Compact Flash cards, which makes it easier for local users to obtain sensitive information by reading a file.

• CWE-200

• https://ics-cert.us-cert.gov/advisories/ICSA-15-274-01Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-15-274-01Third Party Advisory, US Government Resource

Published

Oct 6, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-10143The Platform theme for WordPress is vulnerable to unauthoriz…9.8
• CVE-2015-10144The Responsive Thumbnail Slider plugin for WordPress is vuln…8.8
• CVE-2015-10145Gargoyle router management utility versions 1.5.x contain an…8.8
• CVE-2015-10146The Thumbnail Slider With Lightbox plugin for WordPress is v…4.9
• CVE-2015-10147The Easy Testimonial Slider and Form plugin for WordPress is…4.9
• CVE-2015-10148Hirschmann HiLCOS devices OpenBAT, WLC, BAT300, BAT54 prior …8.8
• CVE-2015-1026Multiple cross-site scripting (XSS) vulnerabilities in ZOHO …
• CVE-2015-1027The version checking subroutine in percona-toolkit before 2.…
• CVE-2015-1028Multiple cross-site scripting (XSS) vulnerabilities in D-Lin…
• CVE-2015-1029The puppetlabs-stdlib module 2.1 through 3.0 and 4.1.0 throu…
• CVE-2015-1030Memory leak in the rfc2553_connect_to function in jbsocket.c…
• CVE-2015-1031Multiple use-after-free vulnerabilities in Privoxy before 3.…