CVEvulnerability

CVE-2022-45794

7.5 HIGH Published 2024-01-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-01-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-306

Description

An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC internal memory and memory card.

Affected configurations

• omron sysmac cj2h-cpu64-eip firmware • omron sysmac cj2h-cpu64 firmware • omron sysmac cj2h-cpu65-eip firmware • omron sysmac cj2h-cpu65 firmware • omron sysmac cj2h-cpu66-eip firmware • omron sysmac cj2h-cpu66 firmware • omron sysmac cj2h-cpu67-eip firmware • omron sysmac cj2h-cpu67 firmware • omron sysmac cj2h-cpu68-eip firmware • omron sysmac cj2h-cpu68 firmware • omron sysmac cj2m-cpu11 firmware • omron sysmac cj2m-cpu12 firmware • omron sysmac cj2m-cpu13 firmware • omron sysmac cj2m-cpu14 firmware • omron sysmac cj2m-cpu15 firmware • omron sysmac cj2m-cpu31 firmware • omron sysmac cj2m-cpu32 firmware • omron sysmac cj2m-cpu33 firmware • omron sysmac cj2m-cpu34 firmware • omron sysmac cj2m-cpu35 firmware • omron sysmac cj1g-cpu45p firmware • omron sysmac cj1g-cpu44p firmware • omron sysmac cj1g-cpu43p firmware • omron sysmac cj1g-cpu42p firmware • omron sysmac cs1h-cpu63h firmware • omron sysmac cs1h-cpu65h firmware • omron sysmac cs1h-cpu67h firmware • omron sysmac cs1h-cpu64h firmware • omron sysmac cs1h-cpu66h firmware • omron sysmac cs1g-cpu44h firmware • omron sysmac cs1g-cpu43h firmware • omron sysmac cs1g-cpu42h firmware • omron sysmac cs1g-cpu45h firmware • omron sysmac cs1d-cpu65h firmware • omron sysmac cs1d-cpu67h firmware • omron sysmac cs1d-cpu68ha firmware • omron sysmac cs1d-cpu67ha firmware • omron sysmac cs1d-cpu65p firmware • omron sysmac cs1d-cpu67sa firmware • omron sysmac cs1d-cpu44sa firmware • omron sysmac cs1d-cpu67p firmware

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References