CVE-2022-45794

High

Description

An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC internal memory and memory card.

SeverityHigh
CVSS8.6
Exploit probability—
ProductOmron Sysmac Cj2h-cpu64-eip Firmware
PublishedJan 10, 2024
First seenJan 10, 2024

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
omron sysmac_cj2h-cpu64-eip_firmwareNo range specified—
omron sysmac_cj2h-cpu64_firmwareNo range specified—
omron sysmac_cj2h-cpu65-eip_firmwareNo range specified—
omron sysmac_cj2h-cpu65_firmwareNo range specified—
omron sysmac_cj2h-cpu66-eip_firmwareNo range specified—
omron sysmac_cj2h-cpu66_firmwareNo range specified—
omron sysmac_cj2h-cpu67-eip_firmwareNo range specified—
omron sysmac_cj2h-cpu67_firmwareNo range specified—
omron sysmac_cj2h-cpu68-eip_firmwareNo range specified—
omron sysmac_cj2h-cpu68_firmwareNo range specified—
omron sysmac_cj2m-cpu11_firmwareNo range specified—
omron sysmac_cj2m-cpu12_firmwareNo range specified—
omron sysmac_cj2m-cpu13_firmwareNo range specified—
omron sysmac_cj2m-cpu14_firmwareNo range specified—
omron sysmac_cj2m-cpu15_firmwareNo range specified—
omron sysmac_cj2m-cpu31_firmwareNo range specified—
omron sysmac_cj2m-cpu32_firmwareNo range specified—
omron sysmac_cj2m-cpu33_firmwareNo range specified—
omron sysmac_cj2m-cpu34_firmwareNo range specified—
omron sysmac_cj2m-cpu35_firmwareNo range specified—
omron sysmac_cj1g-cpu45p_firmwareNo range specified—
omron sysmac_cj1g-cpu44p_firmwareNo range specified—
omron sysmac_cj1g-cpu43p_firmwareNo range specified—
omron sysmac_cj1g-cpu42p_firmwareNo range specified—
omron sysmac_cs1h-cpu63h_firmwareNo range specified—
omron sysmac_cs1h-cpu65h_firmwareNo range specified—
omron sysmac_cs1h-cpu67h_firmwareNo range specified—
omron sysmac_cs1h-cpu64h_firmwareNo range specified—
omron sysmac_cs1h-cpu66h_firmwareNo range specified—
omron sysmac_cs1g-cpu44h_firmwareNo range specified—
omron sysmac_cs1g-cpu43h_firmwareNo range specified—
omron sysmac_cs1g-cpu42h_firmwareNo range specified—
omron sysmac_cs1g-cpu45h_firmwareNo range specified—
omron sysmac_cs1d-cpu65h_firmwareNo range specified—
omron sysmac_cs1d-cpu67h_firmwareNo range specified—
omron sysmac_cs1d-cpu68ha_firmwareNo range specified—
omron sysmac_cs1d-cpu67ha_firmwareNo range specified—
omron sysmac_cs1d-cpu65p_firmwareNo range specified—
omron sysmac_cs1d-cpu67sa_firmwareNo range specified—
omron sysmac_cs1d-cpu44sa_firmwareNo range specified—
omron sysmac_cs1d-cpu67p_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-45794 · Omron Sysmac Cj2h-cpu64-eip Firmware · Dark Radar