An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC internal memory and memory card.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:NOmron Sysmac Cj1g Cpu42p
HWOmronall versionsOmron Sysmac Cj1g Cpu42p Firmware
OSOmronall versionsOmron Sysmac Cj1g Cpu43p
HWOmronall versionsOmron Sysmac Cj1g Cpu43p Firmware
OSOmronall versionsOmron Sysmac Cj1g Cpu44p
HWOmronall versionsOmron Sysmac Cj1g Cpu44p Firmware
OSOmronall versionsOmron Sysmac Cj1g Cpu45p
HWOmronall versionsOmron Sysmac Cj1g Cpu45p Firmware
OSOmronall versionsOmron Sysmac Cj2h Cpu64
HWOmronall versionsOmron Sysmac Cj2h Cpu64 Eip
HWOmronall versionsOmron Sysmac Cj2h Cpu64 Eip Firmware
OSOmronall versionsOmron Sysmac Cj2h Cpu64 Firmware
OSOmronall versionsOmron Sysmac Cj2h Cpu65
HWOmronall versionsOmron Sysmac Cj2h Cpu65 Eip
HWOmronall versionsOmron Sysmac Cj2h Cpu65 Eip Firmware
OSOmronall versionsOmron Sysmac Cj2h Cpu65 Firmware
OSOmronall versionsOmron Sysmac Cj2h Cpu66
HWOmronall versionsOmron Sysmac Cj2h Cpu66 Eip
HWOmronall versionsOmron Sysmac Cj2h Cpu66 Eip Firmware
OSOmronall versionsOmron Sysmac Cj2h Cpu66 Firmware
OSOmronall versionsOmron Sysmac Cj2h Cpu67
HWOmronall versionsOmron Sysmac Cj2h Cpu67 Eip
HWOmronall versionsOmron Sysmac Cj2h Cpu67 Eip Firmware
OSOmronall versionsOmron Sysmac Cj2h Cpu67 Firmware
OSOmronall versionsOmron Sysmac Cj2h Cpu68
HWOmronall versionsOmron Sysmac Cj2h Cpu68 Eip
HWOmronall versionsOmron Sysmac Cj2h Cpu68 Eip Firmware
OSOmronall versionsOmron Sysmac Cj2h Cpu68 Firmware
OSOmronall versionsOmron Sysmac Cj2m Cpu11
HWOmronall versionsOmron Sysmac Cj2m Cpu11 Firmware
OSOmronall versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Related vulnerabilities
CVE-2023-0811CRITICAL9.1PL ✓same product
Omron CJ1M – błędna kontrola dostępu do obszaru hasła UM
CVE-2023-27396CRITICAL9.8PL ✓same vendor
OMRON FINS Protocol — brak uwierzytelnienia i komunikacja jawnym tekstem
CVE-2023-22357CRITICAL9.8PL ✓same vendor
Aktywny kod debugowania w OMRON CP1L-EL20DR-D umożliwia RCE bez uwierzytelnienia
CVE-2022-31206CRITICAL9.8PL ✓same vendor
Brak uwierzytelniania kryptograficznego w sterownikach PLC Omron SYSMAC Nx
CVE-2022-31207CRITICAL9.8PL ✓same vendor
Brak uwierzytelnienia kryptograficznego w sterownikach PLC Omron SYSMAC