CVE-2022-45790

Published: Jan 22, 2024Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected memory. This access can allow overwrite of values including programmed logic.

Affected (46)

Products: Omron: Cj1g Cpu45p Firmware, Cj1g Cpu45p Gtc Firmware, Cj1g Cpu44p Firmware, Cj1g Cpu43p Firmware, Cj1g Cpu42p Firmware, Cp1e E Firmware, Cp1e N Firmware, Cj2h Cpu68 Firmware, Cj2h Cpu67 Firmware, Cj2h Cpu66 Firmware, Cj2h Cpu65 Firmware, Cj2h Cpu64 Firmware, Cj2h Cpu68 Eip Firmware, Cj2h Cpu67 Eip Firmware, Cj2h Cpu66 Eip Firmware, Cj2h Cpu65 Eip Firmware, Cj2h Cpu64 Eip Firmware, Cj2m Cpu35 Firmware, Cj2m Cpu34 Firmware, Cj2m Cpu33 Firmware, Cj2m Cpu32 Firmware, Cj2m Cpu31 Firmware, Cj2m Cpu15 Firmware, Cj2m Cpu14 Firmware, Cj2m Cpu13 Firmware, Cj2m Cpu12 Firmware, Cj2m Cpu11 Firmware, Cj2m Md211 Firmware, Cj2m Md212 Firmware, Cs1d Cpu67s Firmware, Cs1d Cpu65s Firmware, Cs1d Cpu44s Firmware, Cs1d Cpu42s Firmware, Cs1d Cpu65p Firmware, Cs1d Cpu67p Firmware, Cs1d Cpu67h Firmware, Cs1d Cpu65h Firmware, Cs1h Cpu67h Firmware, Cs1h Cpu66h Firmware, Cs1h Cpu65h Firmware, Cs1h Cpu64h Firmware, Cs1h Cpu63h Firmware, Cs1g Cpu45h Firmware, Cs1g Cpu44h Firmware, Cs1g Cpu43h Firmware, Cs1g Cpu42h Firmware

Omron

46 products

Cj1g Cpu45p Firmware

Cj1g Cpu45p Gtc Firmware

Cj2h Cpu68 Eip Firmware

Cj2h Cpu67 Eip Firmware

Cj2h Cpu66 Eip Firmware

Cj2h Cpu65 Eip Firmware

Cj2h Cpu64 Eip Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj1g Cpu45p Firmware	Before 4.1

Running on/with	Platform Versions
Omron Cj1g Cpu45p	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj1g Cpu45p Gtc Firmware	Before 4.1

Running on/with	Platform Versions
Omron Cj1g Cpu45p Gtc	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj1g Cpu44p Firmware	Before 4.1

Running on/with	Platform Versions
Omron Cj1g Cpu44p	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj1g Cpu43p Firmware	Before 4.1

Running on/with	Platform Versions
Omron Cj1g Cpu43p	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj1g Cpu42p Firmware	Before 4.1

Running on/with	Platform Versions
Omron Cj1g Cpu42p	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cp1e E Firmware	Before 1.3

Running on/with	Platform Versions
Omron Cp1e E	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cp1e N Firmware	Before 1.3

Running on/with	Platform Versions
Omron Cp1e N	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2h Cpu68 Firmware	Before 1.5

Running on/with	Platform Versions
Omron Cj2h Cpu68	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2h Cpu67 Firmware	Before 1.5

Running on/with	Platform Versions
Omron Cj2h Cpu67	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2h Cpu66 Firmware	Before 1.5

Running on/with	Platform Versions
Omron Cj2h Cpu66	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2h Cpu65 Firmware	Before 1.5

Running on/with	Platform Versions
Omron Cj2h Cpu65	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2h Cpu64 Firmware	Before 1.5

Running on/with	Platform Versions
Omron Cj2h Cpu64	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2h Cpu68 Eip Firmware	Before 1.5

Running on/with	Platform Versions
Omron Cj2h Cpu68 Eip	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2h Cpu67 Eip Firmware	Before 1.5

Running on/with	Platform Versions
Omron Cj2h Cpu67 Eip	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2h Cpu66 Eip Firmware	Before 1.5

Running on/with	Platform Versions
Omron Cj2h Cpu66 Eip	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2h Cpu65 Eip Firmware	Before 1.5

Running on/with	Platform Versions
Omron Cj2h Cpu65 Eip	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2h Cpu64 Eip Firmware	Before 1.5

Running on/with	Platform Versions
Omron Cj2h Cpu64 Eip	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2m Cpu35 Firmware	Before 2.1

Running on/with	Platform Versions
Omron Cj2m Cpu35	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2m Cpu34 Firmware	Before 2.1

Running on/with	Platform Versions
Omron Cj2m Cpu34	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2m Cpu33 Firmware	Before 2.1

Running on/with	Platform Versions
Omron Cj2m Cpu33	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2m Cpu32 Firmware	Before 2.1

Running on/with	Platform Versions
Omron Cj2m Cpu32	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2m Cpu31 Firmware	Before 2.1

Running on/with	Platform Versions
Omron Cj2m Cpu31	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2m Cpu15 Firmware	Before 2.1

Running on/with	Platform Versions
Omron Cj2m Cpu15	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2m Cpu14 Firmware	Before 2.1

Running on/with	Platform Versions
Omron Cj2m Cpu14	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2m Cpu13 Firmware	Before 2.1

Running on/with	Platform Versions
Omron Cj2m Cpu13	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2m Cpu12 Firmware	Before 2.1

Running on/with	Platform Versions
Omron Cj2m Cpu12	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2m Cpu11 Firmware	Before 2.1

Running on/with	Platform Versions
Omron Cj2m Cpu11	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2m Md211 Firmware	Before 2.1

Running on/with	Platform Versions
Omron Cj2m Md211	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cj2m Md212 Firmware	Before 2.1

Running on/with	Platform Versions
Omron Cj2m Md212	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cs1d Cpu67s Firmware	Before 2.1

Running on/with	Platform Versions
Omron Cs1d Cpu67s	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cs1d Cpu65s Firmware	Before 2.1

Running on/with	Platform Versions
Omron Cs1d Cpu65s	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cs1d Cpu44s Firmware	Before 2.1

Running on/with	Platform Versions
Omron Cs1d Cpu44s	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cs1d Cpu42s Firmware	Before 2.1

Running on/with	Platform Versions
Omron Cs1d Cpu42s	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cs1d Cpu65p Firmware	Before 1.4

Running on/with	Platform Versions
Omron Cs1d Cpu65p	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cs1d Cpu67p Firmware	Before 1.4

Running on/with	Platform Versions
Omron Cs1d Cpu67p	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cs1d Cpu67h Firmware	Before 1.4

Running on/with	Platform Versions
Omron Cs1d Cpu67h	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cs1d Cpu65h Firmware	Before 1.4

Running on/with	Platform Versions
Omron Cs1d Cpu65h	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cs1h Cpu67h Firmware	Before 4.1

Running on/with	Platform Versions
Omron Cs1h Cpu67h	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cs1h Cpu66h Firmware	Before 4.1

Running on/with	Platform Versions
Omron Cs1h Cpu66h	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cs1h Cpu65h Firmware	Before 4.1

Running on/with	Platform Versions
Omron Cs1h Cpu65h	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cs1h Cpu64h Firmware	Before 4.1

Running on/with	Platform Versions
Omron Cs1h Cpu64h	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cs1h Cpu63h Firmware	Before 4.1

Running on/with	Platform Versions
Omron Cs1h Cpu63h	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cs1g Cpu45h Firmware	Before 4.1

Running on/with	Platform Versions
Omron Cs1g Cpu45h	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cs1g Cpu44h Firmware	Before 4.1

Running on/with	Platform Versions
Omron Cs1g Cpu44h	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cs1g Cpu43h Firmware	Before 4.1

Running on/with	Platform Versions
Omron Cs1g Cpu43h	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cs1g Cpu42h Firmware	Before 4.1

Running on/with	Platform Versions
Omron Cs1g Cpu42h	All versions

Related CWEs

CWE-307

Improper Restriction of Excessive Authentication Attempts

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

References (6)

https://www.cisa.gov/news-events/ics-advisories/icsa-23-262-05

Source: ot-cert@dragos.com

Third Party AdvisoryUS Government Resource

https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/

Source: ot-cert@dragos.com

Third Party Advisory

https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-010_en.pdf

Source: ot-cert@dragos.com

Vendor Advisory

https://www.cisa.gov/news-events/ics-advisories/icsa-23-262-05

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-010_en.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.