CRITICAL🇵🇱 Wersja polska

CVE-2023-27396

CVSS 9.8v3.1pub. 2023-06-19upd. 2024-12-24

FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues -- (1)Plaintext communication, and (2)No authentication required. When FINS messages are intercepted, the contents may be retrieved. When arbitrary FINS messages are injected, any commands may be executed on, or the system information may be retrieved from, the affected device. Affected products and versions are as follows: SYSMAC CS-series CPU Units, all versions, SYSMAC CJ-series CPU Units, all versions, SYSMAC CP-series CPU Units, all versions, SYSMAC NJ-series CPU Units, all versions, SYSMAC NX1P-series CPU Units, all versions, SYSMAC NX102-series CPU Units, all versions, and SYSMAC NX7 Database Connection CPU Units (Ver.1.16 or later)

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Omron Cj2h Cpu64

    HW
    Omron
    all versions

  • Omron Cj2h Cpu64 Eip

    HW
    Omron
    all versions

  • Omron Cj2h Cpu64 Eip Firmware

    OS
    Omron
    all versions

  • Omron Cj2h Cpu64 Firmware

    OS
    Omron
    all versions

  • Omron Cj2h Cpu65

    HW
    Omron
    all versions

  • Omron Cj2h Cpu65 Eip

    HW
    Omron
    all versions

  • Omron Cj2h Cpu65 Eip Firmware

    OS
    Omron
    all versions

  • Omron Cj2h Cpu65 Firmware

    OS
    Omron
    all versions

  • Omron Cj2h Cpu66

    HW
    Omron
    all versions

  • Omron Cj2h Cpu66 Eip

    HW
    Omron
    all versions

  • Omron Cj2h Cpu66 Eip Firmware

    OS
    Omron
    all versions

  • Omron Cj2h Cpu66 Firmware

    OS
    Omron
    all versions

  • Omron Cj2h Cpu67

    HW
    Omron
    all versions

  • Omron Cj2h Cpu67 Eip

    HW
    Omron
    all versions

  • Omron Cj2h Cpu67 Eip Firmware

    OS
    Omron
    all versions

  • Omron Cj2h Cpu67 Firmware

    OS
    Omron
    all versions

  • Omron Cj2h Cpu68

    HW
    Omron
    all versions

  • Omron Cj2h Cpu68 Eip

    HW
    Omron
    all versions

  • Omron Cj2h Cpu68 Eip Firmware

    OS
    Omron
    all versions

  • Omron Cj2h Cpu68 Firmware

    OS
    Omron
    all versions

  • Omron Cj2m Cpu11

    HW
    Omron
    all versions

  • Omron Cj2m Cpu11 Firmware

    OS
    Omron
    all versions

  • Omron Cj2m Cpu12

    HW
    Omron
    all versions

  • Omron Cj2m Cpu12 Firmware

    OS
    Omron
    all versions

  • Omron Cj2m Cpu13

    HW
    Omron
    all versions

  • Omron Cj2m Cpu13 Firmware

    OS
    Omron
    all versions

  • Omron Cj2m Cpu14

    HW
    Omron
    all versions

  • Omron Cj2m Cpu14 Firmware

    OS
    Omron
    all versions

  • Omron Cj2m Cpu15

    HW
    Omron
    all versions

  • Omron Cj2m Cpu15 Firmware

    OS
    Omron
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-45790HIGH8.6same product

The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is su...

CVE-2023-38744HIGH7.5same product

Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in th...

CVE-2023-0811CRITICAL9.1PL ✓same vendor

Omron CJ1M – błędna kontrola dostępu do obszaru hasła UM

CVE-2023-22357CRITICAL9.8PL ✓same vendor

Aktywny kod debugowania w OMRON CP1L-EL20DR-D umożliwia RCE bez uwierzytelnienia

CVE-2022-31207CRITICAL9.8PL ✓same vendor

Brak uwierzytelnienia kryptograficznego w sterownikach PLC Omron SYSMAC