Description
Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Omron | CJ1M SYSMAC CJ-series | All versions | — |
| Omron | CJ1M SYSMAC CS-series | All versions | — |
| Omron | CJ1M SYSMAC CP-series | All versions | — |
Advisories 1
- ICSA-23-073-01 Omron CJ1M PLC CISA ICS & IT advisories · Mar 31, 2023