CVE-2023-0811criticalCWE-284

CVE-2023-0811: fallo crítico en Omron CJ1M SYSMAC CJ-series

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear CJ1M SYSMAC CJ-series+ Monitorear CJ1M SYSMAC CP-series

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.1epss 0.6%
Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Productos afectados
Omron · CJ1M SYSMAC CJ-seriesOmron · CJ1M SYSMAC CP-seriesOmron · CJ1M SYSMAC CS-series