CVE-2022-45790: high-severity vulnerability in Omron CJ-series and CS-series CPU modules
Omron FINS memory protection susceptible to bruteforce
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.6epss 0.9%
The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected memory. This access can allow overwrite of values including programmed logic.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Affected products
Omron · CJ-series and CS-series CPU modulesRelated CVEs — Omron CJ-series and CS-series CPU modules
In the same product, most dangerous first.