CVE-2022-45790
High
Description
The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected memory. This access can allow overwrite of values including programmed logic.
SeverityHigh
CVSS8.6
Exploit probability—
ProductOmron Cj1g-cpu45p Firmware
PublishedJan 22, 2024
First seenJan 22, 2024
Weakness typeCWE-307CWE-307
How to fix
Update
- omron cj1g-cpu45p_firmware4.1 or later
- omron cj1g-cpu45p-gtc_firmware4.1 or later
- omron cj1g-cpu44p_firmware4.1 or later
- omron cj1g-cpu43p_firmware4.1 or later
- omron cj1g-cpu42p_firmware4.1 or later
- omron cp1e-e_firmware1.3 or later
- omron cp1e-n_firmware1.3 or later
- omron cj2h-cpu68_firmware1.5 or later
- omron cj2h-cpu67_firmware1.5 or later
- omron cj2h-cpu66_firmware1.5 or later
- omron cj2h-cpu65_firmware1.5 or later
- omron cj2h-cpu64_firmware1.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| omron cj1g-cpu45p_firmware | v < 4.1 | 4.1 |
| omron cj1g-cpu45p-gtc_firmware | v < 4.1 | 4.1 |
| omron cj1g-cpu44p_firmware | v < 4.1 | 4.1 |
| omron cj1g-cpu43p_firmware | v < 4.1 | 4.1 |
| omron cj1g-cpu42p_firmware | v < 4.1 | 4.1 |
| omron cp1e-e_firmware | v < 1.3 | 1.3 |
| omron cp1e-n_firmware | v < 1.3 | 1.3 |
| omron cj2h-cpu68_firmware | v < 1.5 | 1.5 |
| omron cj2h-cpu67_firmware | v < 1.5 | 1.5 |
| omron cj2h-cpu66_firmware | v < 1.5 | 1.5 |
| omron cj2h-cpu65_firmware | v < 1.5 | 1.5 |
| omron cj2h-cpu64_firmware | v < 1.5 | 1.5 |
| omron cj2h-cpu68-eip_firmware | v < 1.5 | 1.5 |
| omron cj2h-cpu67-eip_firmware | v < 1.5 | 1.5 |
| omron cj2h-cpu66-eip_firmware | v < 1.5 | 1.5 |
| omron cj2h-cpu65-eip_firmware | v < 1.5 | 1.5 |
| omron cj2h-cpu64-eip_firmware | v < 1.5 | 1.5 |
| omron cj2m-cpu35_firmware | v < 2.1 | 2.1 |
| omron cj2m-cpu34_firmware | v < 2.1 | 2.1 |
| omron cj2m-cpu33_firmware | v < 2.1 | 2.1 |
| omron cj2m-cpu32_firmware | v < 2.1 | 2.1 |
| omron cj2m-cpu31_firmware | v < 2.1 | 2.1 |
| omron cj2m-cpu15_firmware | v < 2.1 | 2.1 |
| omron cj2m-cpu14_firmware | v < 2.1 | 2.1 |
| omron cj2m-cpu13_firmware | v < 2.1 | 2.1 |
| omron cj2m-cpu12_firmware | v < 2.1 | 2.1 |
| omron cj2m-cpu11_firmware | v < 2.1 | 2.1 |
| omron cj2m-md211_firmware | v < 2.1 | 2.1 |
| omron cj2m-md212_firmware | v < 2.1 | 2.1 |
| omron cs1d-cpu67s_firmware | v < 2.1 | 2.1 |
| omron cs1d-cpu65s_firmware | v < 2.1 | 2.1 |
| omron cs1d-cpu44s_firmware | v < 2.1 | 2.1 |
| omron cs1d-cpu42s_firmware | v < 2.1 | 2.1 |
| omron cs1d-cpu65p_firmware | v < 1.4 | 1.4 |
| omron cs1d-cpu67p_firmware | v < 1.4 | 1.4 |
| omron cs1d-cpu67h_firmware | v < 1.4 | 1.4 |
| omron cs1d-cpu65h_firmware | v < 1.4 | 1.4 |
| omron cs1h-cpu67h_firmware | v < 4.1 | 4.1 |
| omron cs1h-cpu66h_firmware | v < 4.1 | 4.1 |
| omron cs1h-cpu65h_firmware | v < 4.1 | 4.1 |
| omron cs1h-cpu64h_firmware | v < 4.1 | 4.1 |
| omron cs1h-cpu63h_firmware | v < 4.1 | 4.1 |
| omron cs1g-cpu45h_firmware | v < 4.1 | 4.1 |
| omron cs1g-cpu44h_firmware | v < 4.1 | 4.1 |
| omron cs1g-cpu43h_firmware | v < 4.1 | 4.1 |
| omron cs1g-cpu42h_firmware | v < 4.1 | 4.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.