9.1

CVE-2023-0811

Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program. 

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Omron ≫ Sysmac Cj2h-cpu64 Firmware Version -
   Omron ≫ Sysmac Cj2h-cpu64 Version -
Omron ≫ Sysmac Cj2h-cpu65 Firmware Version -
   Omron ≫ Sysmac Cj2h-cpu65 Version -
Omron ≫ Sysmac Cj2h-cpu66 Firmware Version -
   Omron ≫ Sysmac Cj2h-cpu66 Version -
Omron ≫ Sysmac Cj2h-cpu67 Firmware Version -
   Omron ≫ Sysmac Cj2h-cpu67 Version -
Omron ≫ Sysmac Cj2h-cpu68 Firmware Version -
   Omron ≫ Sysmac Cj2h-cpu68 Version -
Omron ≫ Sysmac Cj2m-cpu11 Firmware Version -
   Omron ≫ Sysmac Cj2m-cpu11 Version -
Omron ≫ Sysmac Cj2m-cpu12 Firmware Version -
   Omron ≫ Sysmac Cj2m-cpu12 Version -
Omron ≫ Sysmac Cj2m-cpu13 Firmware Version -
   Omron ≫ Sysmac Cj2m-cpu13 Version -
Omron ≫ Sysmac Cj2m-cpu14 Firmware Version -
   Omron ≫ Sysmac Cj2m-cpu14 Version -
Omron ≫ Sysmac Cj2m-cpu15 Firmware Version -
   Omron ≫ Sysmac Cj2m-cpu15 Version -
Omron ≫ Sysmac Cj2m-cpu31 Firmware Version -
   Omron ≫ Sysmac Cj2m-cpu31 Version -
Omron ≫ Sysmac Cj2m-cpu32 Firmware Version -
   Omron ≫ Sysmac Cj2m-cpu32 Version -
Omron ≫ Sysmac Cj2m-cpu33 Firmware Version -
   Omron ≫ Sysmac Cj2m-cpu33 Version -
Omron ≫ Sysmac Cj2m-cpu34 Firmware Version -
   Omron ≫ Sysmac Cj2m-cpu34 Version -
Omron ≫ Sysmac Cj2m-cpu35 Firmware Version -
   Omron ≫ Sysmac Cj2m-cpu35 Version -
Omron ≫ Sysmac Cp1e-e10dr-a Firmware Version -
   Omron ≫ Sysmac Cp1e-e10dr-a Version -
Omron ≫ Sysmac Cp1e-e10dr-d Firmware Version -
   Omron ≫ Sysmac Cp1e-e10dr-d Version -
Omron ≫ Sysmac Cp1e-e10dt-a Firmware Version -
   Omron ≫ Sysmac Cp1e-e10dt-a Version -
Omron ≫ Sysmac Cp1e-e10dt-d Firmware Version -
   Omron ≫ Sysmac Cp1e-e10dt-d Version -
Omron ≫ Sysmac Cp1e-e14dr-a Firmware Version -
   Omron ≫ Sysmac Cp1e-e14dr-a Version -
Omron ≫ Sysmac Cp1e-e20dr-a Firmware Version -
   Omron ≫ Sysmac Cp1e-e20dr-a Version -
Omron ≫ Sysmac Cp1e-e30dr-a Firmware Version -
   Omron ≫ Sysmac Cp1e-e30dr-a Version -
Omron ≫ Sysmac Cp1e-e40dr-a Firmware Version -
   Omron ≫ Sysmac Cp1e-e40dr-a Version -
Omron ≫ Sysmac Cp1h-x40dr-a Firmware Version -
   Omron ≫ Sysmac Cp1h-x40dr-a Version -
Omron ≫ Sysmac Cp1h-x40dt-d Firmware Version -
   Omron ≫ Sysmac Cp1h-x40dt-d Version -
Omron ≫ Sysmac Cp1h-y20dt-d Firmware Version -
   Omron ≫ Sysmac Cp1h-y20dt-d Version -
Omron ≫ Sysmac Cp1l-l10dr-a Firmware Version -
   Omron ≫ Sysmac Cp1l-l10dr-a Version -
Omron ≫ Sysmac Cp1l-l10dr-d Firmware Version -
   Omron ≫ Sysmac Cp1l-l10dr-d Version -
Omron ≫ Sysmac Cp1l-l10dt-a Firmware Version -
   Omron ≫ Sysmac Cp1l-l10dt-a Version -
Omron ≫ Sysmac Cp1l-l10dt-d Firmware Version -
   Omron ≫ Sysmac Cp1l-l10dt-d Version -
Omron ≫ Sysmac Cp1l-l14dr-a Firmware Version -
   Omron ≫ Sysmac Cp1l-l14dr-a Version -
Omron ≫ Sysmac Cp1l-l14dr-d Firmware Version -
   Omron ≫ Sysmac Cp1l-l14dr-d Version -
Omron ≫ Sysmac Cp1l-l14dt-a Firmware Version -
   Omron ≫ Sysmac Cp1l-l14dt-a Version -
Omron ≫ Sysmac Cp1l-l14dt-d Firmware Version -
   Omron ≫ Sysmac Cp1l-l14dt-d Version -
Omron ≫ Sysmac Cp1l-l20dr-a Firmware Version -
   Omron ≫ Sysmac Cp1l-l20dr-a Version -
Omron ≫ Sysmac Cp1l-l20dr-d Firmware Version -
   Omron ≫ Sysmac Cp1l-l20dr-d Version -
Omron ≫ Sysmac Cp1l-l20dt-a Firmware Version -
   Omron ≫ Sysmac Cp1l-l20dt-a Version -
Omron ≫ Sysmac Cp1l-l20dt-d Firmware Version -
   Omron ≫ Sysmac Cp1l-l20dt-d Version -
Omron ≫ Sysmac Cp1l-m30dr-a Firmware Version -
   Omron ≫ Sysmac Cp1l-m30dr-a Version -
Omron ≫ Sysmac Cp1l-m30dr-d Firmware Version -
   Omron ≫ Sysmac Cp1l-m30dr-d Version -
Omron ≫ Sysmac Cp1l-m30dt-a Firmware Version -
   Omron ≫ Sysmac Cp1l-m30dt-a Version -
Omron ≫ Sysmac Cp1l-m30dt-d Firmware Version -
   Omron ≫ Sysmac Cp1l-m30dt-d Version -
Omron ≫ Sysmac Cp1l-m40dr-a Firmware Version -
   Omron ≫ Sysmac Cp1l-m40dr-a Version -
Omron ≫ Sysmac Cp1l-m40dr-d Firmware Version -
   Omron ≫ Sysmac Cp1l-m40dr-d Version -
Omron ≫ Sysmac Cp1l-m40dt-a Firmware Version -
   Omron ≫ Sysmac Cp1l-m40dt-a Version -
Omron ≫ Sysmac Cp1l-m40dt-d Firmware Version -
   Omron ≫ Sysmac Cp1l-m40dt-d Version -
Omron ≫ Sysmac Cp1l-m60dr-a Firmware Version -
   Omron ≫ Sysmac Cp1l-m60dr-a Version -
Omron ≫ Sysmac Cp1l-m60dr-d Firmware Version -
   Omron ≫ Sysmac Cp1l-m60dr-d Version -
Omron ≫ Sysmac Cp1l-m60dt-a Firmware Version -
   Omron ≫ Sysmac Cp1l-m60dt-a Version -
Omron ≫ Sysmac Cp1l-m60dt-d Firmware Version -
   Omron ≫ Sysmac Cp1l-m60dt-d Version -
Omron ≫ Sysmac Cp2e-e14dr-a Firmware Version -
   Omron ≫ Sysmac Cp2e-e14dr-a Version -
Omron ≫ Sysmac Cp2e-e20dr-a Firmware Version -
   Omron ≫ Sysmac Cp2e-e20dr-a Version -
Omron ≫ Sysmac Cp2e-e30dr-a Firmware Version -
   Omron ≫ Sysmac Cp2e-e30dr-a Version -
Omron ≫ Sysmac Cp2e-e40dr-a Firmware Version -
   Omron ≫ Sysmac Cp2e-e40dr-a Version -
Omron ≫ Sysmac Cp2e-e60dr-a Firmware Version -
   Omron ≫ Sysmac Cp2e-e60dr-a Version -
Omron ≫ Sysmac Cp2e-n14dr-a Firmware Version -
   Omron ≫ Sysmac Cp2e-n14dr-a Version -
Omron ≫ Sysmac Cp2e-n14dr-d Firmware Version -
   Omron ≫ Sysmac Cp2e-n14dr-d Version -
Omron ≫ Sysmac Cp2e-n14dt-a Firmware Version -
   Omron ≫ Sysmac Cp2e-n14dt-a Version -
Omron ≫ Sysmac Cp2e-n14dt-d Firmware Version -
   Omron ≫ Sysmac Cp2e-n14dt-d Version -
Omron ≫ Sysmac Cp2e-n20dr-a Firmware Version -
   Omron ≫ Sysmac Cp2e-n20dr-a Version -
Omron ≫ Sysmac Cp2e-n20dr-d Firmware Version -
   Omron ≫ Sysmac Cp2e-n20dr-d Version -
Omron ≫ Sysmac Cp2e-n20dt-a Firmware Version -
   Omron ≫ Sysmac Cp2e-n20dt-a Version -
Omron ≫ Sysmac Cp2e-n20dt-d Firmware Version -
   Omron ≫ Sysmac Cp2e-n20dt-d Version -
Omron ≫ Sysmac Cp2e-n30dr-a Firmware Version -
   Omron ≫ Sysmac Cp2e-n30dr-a Version -
Omron ≫ Sysmac Cp2e-n30dr-d Firmware Version -
   Omron ≫ Sysmac Cp2e-n30dr-d Version -
Omron ≫ Sysmac Cp2e-n30dt-a Firmware Version -
   Omron ≫ Sysmac Cp2e-n30dt-a Version -
Omron ≫ Sysmac Cp2e-n30dt-d Firmware Version -
   Omron ≫ Sysmac Cp2e-n30dt-d Version -
Omron ≫ Sysmac Cp2e-n40dr-a Firmware Version -
   Omron ≫ Sysmac Cp2e-n40dr-a Version -
Omron ≫ Sysmac Cp2e-n40dr-d Firmware Version -
   Omron ≫ Sysmac Cp2e-n40dr-d Version -
Omron ≫ Sysmac Cp2e-n40dt-a Firmware Version -
   Omron ≫ Sysmac Cp2e-n40dt-a Version -
Omron ≫ Sysmac Cp2e-n40dt-d Firmware Version -
   Omron ≫ Sysmac Cp2e-n40dt-d Version -
Omron ≫ Sysmac Cp2e-n60dr-a Firmware Version -
   Omron ≫ Sysmac Cp2e-n60dr-a Version -
Omron ≫ Sysmac Cp2e-n60dr-d Firmware Version -
   Omron ≫ Sysmac Cp2e-n60dr-d Version -
Omron ≫ Sysmac Cp2e-n60dt-a Firmware Version -
   Omron ≫ Sysmac Cp2e-n60dt-a Version -
Omron ≫ Sysmac Cp2e-n60dt-d Firmware Version -
   Omron ≫ Sysmac Cp2e-n60dt-d Version -
Omron ≫ Sysmac Cp2e-s30dr-a Firmware Version -
   Omron ≫ Sysmac Cp2e-s30dr-a Version -
Omron ≫ Sysmac Cp2e-s30dt-d Firmware Version -
   Omron ≫ Sysmac Cp2e-s30dt-d Version -
Omron ≫ Sysmac Cp2e-s40dr-a Firmware Version -
   Omron ≫ Sysmac Cp2e-s40dr-a Version -
Omron ≫ Sysmac Cp2e-s40dt-d Firmware Version -
   Omron ≫ Sysmac Cp2e-s40dt-d Version -
Omron ≫ Sysmac Cp2e-s60dr-a Firmware Version -
   Omron ≫ Sysmac Cp2e-s60dr-a Version -
Omron ≫ Sysmac Cp2e-s60dt-d Firmware Version -
   Omron ≫ Sysmac Cp2e-s60dt-d Version -
Omron ≫ Sysmac Cs1w-eip21 Firmware Version -
   Omron ≫ Sysmac Cs1w-eip21 Version -
Omron ≫ Sysmac Cs1w-etn21 Firmware Version -
   Omron ≫ Sysmac Cs1w-etn21 Version -
Omron ≫ Sysmac Cs1w-fln22 Firmware Version -
   Omron ≫ Sysmac Cs1w-fln22 Version -
Omron ≫ Sysmac Cs1w-nc[]71 Firmware Version -
   Omron ≫ Sysmac Cs1w-nc[]71 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.62% 0.45
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
DHS.gov 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-01
Third Party Advisory
US Government Resource
https://www.ia.omron.com/product/vulnerability/OMSR-2023-001_en.pdf
Vendor Advisory
Mitigation