high8.6
CVE-2022-45794
An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC …
Impact
An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC internal memory and memory card.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Omron | Sysmac Cj2h-Cpu64-Eip Firmware | All versions |
| Omron | Sysmac Cj2h-Cpu64 Firmware | All versions |
| Omron | Sysmac Cj2h-Cpu65-Eip Firmware | All versions |
| Omron | Sysmac Cj2h-Cpu65 Firmware | All versions |
| Omron | Sysmac Cj2h-Cpu66-Eip Firmware | All versions |
| Omron | Sysmac Cj2h-Cpu66 Firmware | All versions |
| Omron | Sysmac Cj2h-Cpu67-Eip Firmware | All versions |
| Omron | Sysmac Cj2h-Cpu67 Firmware | All versions |
| Omron | Sysmac Cj2h-Cpu68-Eip Firmware | All versions |
| Omron | Sysmac Cj2h-Cpu68 Firmware | All versions |
| Omron | Sysmac Cj2m-Cpu11 Firmware | All versions |
| Omron | Sysmac Cj2m-Cpu12 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/
- https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-002_en.pdf
- https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/
- https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-002_en.pdf