Skip to content
OpenAdvisories
High ICSA-23-108-01 1 CVE

Omron CS/CJ Series

Published Apr 20, 2023 · Updated Apr 20, 2023

Vendor: Omron Product: SYSMAC CJ1G-CPU[][]P Product: SYSMAC CJ2H-CPU6[] Product: SYSMAC CJ2H-CPU6[]-EIP Product: SYSMAC CJ2M-CPU[][] Product: SYSMAC CS1D-CPU[][]H Product: SYSMAC CS1D-CPU[][]HA Product: SYSMAC CS1D-CPU[][]P Product: SYSMAC CS1D-CPU[][]S Product: SYSMAC CS1D-CPU[][]SA Product: SYSMAC CS1G-CPU[][]H Product: SYSMAC CS1H-CPU[][]H

Summary

Successful exploitation of this vulnerability could allow an attacker to access sensitive information in the file system and memory.

Vulnerabilities 1

  • High 8.6
    CVE-2022-45794

    Omron CJ-series and CS-series unauthenticated filesystem access.

    An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC internal memory and memory card.

    Omron CJ-series and CS-series CPU modules ICS / OT

Revision history

  1. #1

    CSAF Creation Date

References