CVEvulnerability

CVE-2023-0811

9.1 CRITICAL Published 2023-03-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-03-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-284

Description

Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.

Affected configurations

• omron sysmac cj2h-cpu64 firmware • omron sysmac cj2h-cpu64-eip firmware • omron sysmac cj2h-cpu65 firmware • omron sysmac cj2h-cpu65-eip firmware • omron sysmac cj2h-cpu66 firmware • omron sysmac cj2h-cpu66-eip firmware • omron sysmac cj2h-cpu67 firmware • omron sysmac cj2h-cpu67-eip firmware • omron sysmac cj2h-cpu68 firmware • omron sysmac cj2h-cpu68-eip firmware • omron sysmac cj2m-cpu11 firmware • omron sysmac cj2m-cpu12 firmware • omron sysmac cj2m-cpu13 firmware • omron sysmac cj2m-cpu14 firmware • omron sysmac cj2m-cpu15 firmware • omron sysmac cj2m-cpu31 firmware • omron sysmac cj2m-cpu32 firmware • omron sysmac cj2m-cpu33 firmware • omron sysmac cj2m-cpu34 firmware • omron sysmac cj2m-cpu35 firmware • omron sysmac cp1e-e10dr-a firmware • omron sysmac cp1e-e10dr-d firmware • omron sysmac cp1e-e10dt-a firmware • omron sysmac cp1e-e10dt-d firmware • omron sysmac cp1e-e10dt1-a firmware • omron sysmac cp1e-e10dt1-d firmware • omron sysmac cp1e-e14dr-a firmware • omron sysmac cp1e-e14sdr-a firmware • omron sysmac cp1e-e20dr-a firmware • omron sysmac cp1e-e20sdr-a firmware • omron sysmac cp1e-e30dr-a firmware • omron sysmac cp1e-e30sdr-a firmware • omron sysmac cp1e-e40dr-a firmware • omron sysmac cp1e-e40sdr-a firmware • omron sysmac cp1e-e60sdr-a firmware • omron sysmac cp1e-na20dr-a firmware • omron sysmac cp1e-na20dt-d firmware • omron sysmac cp1e-na20dt1-d firmware • omron sysmac cp1h-x40dr-a firmware • omron sysmac cp1h-x40dt-d firmware • omron sysmac cp1h-x40dt1-d firmware • omron sysmac cp1h-xa40dr-a firmware • omron sysmac cp1h-xa40dt-d firmware • omron sysmac cp1h-xa40dt1-d firmware • omron sysmac cp1h-y20dt-d firmware • omron sysmac cp1l-el20dr-d firmware • omron sysmac cp1l-em30dr-d firmware • omron sysmac cp1l-em30dt-d firmware • omron sysmac cp1l-em30dt1-d firmware • omron sysmac cp1l-em40dr-d firmware • omron sysmac cp1l-em40dt-d firmware • omron sysmac cp1l-em40dt1-d firmware • omron sysmac cp1l-l10dr-a firmware • omron sysmac cp1l-l10dr-d firmware • omron sysmac cp1l-l10dt-a firmware • omron sysmac cp1l-l10dt-d firmware • omron sysmac cp1l-l10dt1-d firmware • omron sysmac cp1l-l14dr-a firmware • omron sysmac cp1l-l14dr-d firmware • omron sysmac cp1l-l14dt-a firmware … and 68 more

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References