HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2022-45790

CVSS 8.6v3.1pub. 2024-01-22upd. 2024-11-21

The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected memory. This access can allow overwrite of values including programmed logic.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

  • Omron Cj1g Cpu42p

    HW
    Omron
    all versions

  • Omron Cj1g Cpu42p Firmware

    OS
    Omron
    < 4.1

  • Omron Cj1g Cpu43p

    HW
    Omron
    all versions

  • Omron Cj1g Cpu43p Firmware

    OS
    Omron
    < 4.1

  • Omron Cj1g Cpu44p

    HW
    Omron
    all versions

  • Omron Cj1g Cpu44p Firmware

    OS
    Omron
    < 4.1

  • Omron Cj1g Cpu45p

    HW
    Omron
    all versions

  • Omron Cj1g Cpu45p Firmware

    OS
    Omron
    < 4.1

  • Omron Cj1g Cpu45p Gtc

    HW
    Omron
    all versions

  • Omron Cj1g Cpu45p Gtc Firmware

    OS
    Omron
    < 4.1

  • Omron Cj2h Cpu64

    HW
    Omron
    all versions

  • Omron Cj2h Cpu64 Eip

    HW
    Omron
    all versions

  • Omron Cj2h Cpu64 Eip Firmware

    OS
    Omron
    < 1.5

  • Omron Cj2h Cpu64 Firmware

    OS
    Omron
    < 1.5

  • Omron Cj2h Cpu65

    HW
    Omron
    all versions

  • Omron Cj2h Cpu65 Eip

    HW
    Omron
    all versions

  • Omron Cj2h Cpu65 Eip Firmware

    OS
    Omron
    < 1.5

  • Omron Cj2h Cpu65 Firmware

    OS
    Omron
    < 1.5

  • Omron Cj2h Cpu66

    HW
    Omron
    all versions

  • Omron Cj2h Cpu66 Eip

    HW
    Omron
    all versions

  • Omron Cj2h Cpu66 Eip Firmware

    OS
    Omron
    < 1.5

  • Omron Cj2h Cpu66 Firmware

    OS
    Omron
    < 1.5

  • Omron Cj2h Cpu67

    HW
    Omron
    all versions

  • Omron Cj2h Cpu67 Eip

    HW
    Omron
    all versions

  • Omron Cj2h Cpu67 Eip Firmware

    OS
    Omron
    < 1.5

  • Omron Cj2h Cpu67 Firmware

    OS
    Omron
    < 1.5

  • Omron Cj2h Cpu68

    HW
    Omron
    all versions

  • Omron Cj2h Cpu68 Eip

    HW
    Omron
    all versions

  • Omron Cj2h Cpu68 Eip Firmware

    OS
    Omron
    < 1.5

  • Omron Cj2h Cpu68 Firmware

    OS
    Omron
    < 1.5
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2023-27396CRITICAL9.8PL ✓same product

OMRON FINS Protocol — brak uwierzytelnienia i komunikacja jawnym tekstem

CVE-2023-38744HIGH7.5same product

Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in th...

CVE-2023-0811CRITICAL9.1PL ✓same vendor

Omron CJ1M – błędna kontrola dostępu do obszaru hasła UM

CVE-2023-22357CRITICAL9.8PL ✓same vendor

Aktywny kod debugowania w OMRON CP1L-EL20DR-D umożliwia RCE bez uwierzytelnienia

CVE-2022-31207CRITICAL9.8PL ✓same vendor

Brak uwierzytelnienia kryptograficznego w sterownikach PLC Omron SYSMAC