CRITICAL🇵🇱 Wersja polska

CVE-2023-0811

CVSS 9.1v3.1pub. 2023-03-16upd. 2024-11-21

Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

  • Omron Sysmac Cj2h Cpu64

    HW
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu64 Eip

    HW
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu64 Eip Firmware

    OS
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu64 Firmware

    OS
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu65

    HW
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu65 Eip

    HW
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu65 Eip Firmware

    OS
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu65 Firmware

    OS
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu66

    HW
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu66 Eip

    HW
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu66 Eip Firmware

    OS
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu66 Firmware

    OS
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu67

    HW
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu67 Eip

    HW
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu67 Eip Firmware

    OS
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu67 Firmware

    OS
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu68

    HW
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu68 Eip

    HW
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu68 Eip Firmware

    OS
    Omron
    all versions

  • Omron Sysmac Cj2h Cpu68 Firmware

    OS
    Omron
    all versions

  • Omron Sysmac Cj2m Cpu11

    HW
    Omron
    all versions

  • Omron Sysmac Cj2m Cpu11 Firmware

    OS
    Omron
    all versions

  • Omron Sysmac Cj2m Cpu12

    HW
    Omron
    all versions

  • Omron Sysmac Cj2m Cpu12 Firmware

    OS
    Omron
    all versions

  • Omron Sysmac Cj2m Cpu13

    HW
    Omron
    all versions

  • Omron Sysmac Cj2m Cpu13 Firmware

    OS
    Omron
    all versions

  • Omron Sysmac Cj2m Cpu14

    HW
    Omron
    all versions

  • Omron Sysmac Cj2m Cpu14 Firmware

    OS
    Omron
    all versions

  • Omron Sysmac Cj2m Cpu15

    HW
    Omron
    all versions

  • Omron Sysmac Cj2m Cpu15 Firmware

    OS
    Omron
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-45794HIGH8.6same product

An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a net...

CVE-2023-27396CRITICAL9.8PL ✓same vendor

OMRON FINS Protocol — brak uwierzytelnienia i komunikacja jawnym tekstem

CVE-2023-22357CRITICAL9.8PL ✓same vendor

Aktywny kod debugowania w OMRON CP1L-EL20DR-D umożliwia RCE bez uwierzytelnienia

CVE-2022-31206CRITICAL9.8PL ✓same vendor

Brak uwierzytelniania kryptograficznego w sterownikach PLC Omron SYSMAC Nx

CVE-2022-31207CRITICAL9.8PL ✓same vendor

Brak uwierzytelnienia kryptograficznego w sterownikach PLC Omron SYSMAC