CVE-2022-45794

Published: Jan 10, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC internal memory and memory card.

Affected (41)

Omron

41 products

Sysmac Cj2h Cpu64 Eip Firmware

Sysmac Cj2h Cpu64 Firmware

Sysmac Cj2h Cpu65 Eip Firmware

Sysmac Cj2h Cpu65 Firmware

Sysmac Cj2h Cpu66 Eip Firmware

Sysmac Cj2h Cpu66 Firmware

Sysmac Cj2h Cpu67 Eip Firmware

Sysmac Cj2h Cpu67 Firmware

Sysmac Cj2h Cpu68 Eip Firmware

Sysmac Cj2h Cpu68 Firmware

Sysmac Cj2m Cpu11 Firmware

Sysmac Cj2m Cpu12 Firmware

Sysmac Cj2m Cpu13 Firmware

Sysmac Cj2m Cpu14 Firmware

Sysmac Cj2m Cpu15 Firmware

Sysmac Cj2m Cpu31 Firmware

Sysmac Cj2m Cpu32 Firmware

Sysmac Cj2m Cpu33 Firmware

Sysmac Cj2m Cpu34 Firmware

Sysmac Cj2m Cpu35 Firmware

Sysmac Cj1g Cpu45p Firmware

Sysmac Cj1g Cpu44p Firmware

Sysmac Cj1g Cpu43p Firmware

Sysmac Cj1g Cpu42p Firmware

Sysmac Cs1h Cpu63h Firmware

Sysmac Cs1h Cpu65h Firmware

Sysmac Cs1h Cpu67h Firmware

Sysmac Cs1h Cpu64h Firmware

Sysmac Cs1h Cpu66h Firmware

Sysmac Cs1g Cpu44h Firmware

Sysmac Cs1g Cpu43h Firmware

Sysmac Cs1g Cpu42h Firmware

Sysmac Cs1g Cpu45h Firmware

Sysmac Cs1d Cpu65h Firmware

Sysmac Cs1d Cpu67h Firmware

Sysmac Cs1d Cpu68ha Firmware

Sysmac Cs1d Cpu67ha Firmware

Sysmac Cs1d Cpu65p Firmware

Sysmac Cs1d Cpu67sa Firmware

Sysmac Cs1d Cpu44sa Firmware

Sysmac Cs1d Cpu67p Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2h Cpu64 Eip Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2h Cpu64 Eip	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2h Cpu64 Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2h Cpu64	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2h Cpu65 Eip Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2h Cpu65 Eip	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2h Cpu65 Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2h Cpu65	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2h Cpu66 Eip Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2h Cpu66 Eip	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2h Cpu66 Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2h Cpu66	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2h Cpu67 Eip Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2h Cpu67 Eip	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2h Cpu67 Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2h Cpu67	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2h Cpu68 Eip Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2h Cpu68 Eip	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2h Cpu68 Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2h Cpu68	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2m Cpu11 Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2m Cpu11	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2m Cpu12 Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2m Cpu12	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2m Cpu13 Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2m Cpu13	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2m Cpu14 Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2m Cpu14	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2m Cpu15 Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2m Cpu15	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2m Cpu31 Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2m Cpu31	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2m Cpu32 Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2m Cpu32	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2m Cpu33 Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2m Cpu33	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2m Cpu34 Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2m Cpu34	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj2m Cpu35 Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj2m Cpu35	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj1g Cpu45p Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj1g Cpu45p	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj1g Cpu44p Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj1g Cpu44p	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj1g Cpu43p Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj1g Cpu43p	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cj1g Cpu42p Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cj1g Cpu42p	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cs1h Cpu63h Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cs1h Cpu63h	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cs1h Cpu65h Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cs1h Cpu65h	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cs1h Cpu67h Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cs1h Cpu67h	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cs1h Cpu64h Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cs1h Cpu64h	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cs1h Cpu66h Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cs1h Cpu66h	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cs1g Cpu44h Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cs1g Cpu44h	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cs1g Cpu43h Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cs1g Cpu43h	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cs1g Cpu42h Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cs1g Cpu42h	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cs1g Cpu45h Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cs1g Cpu45h	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cs1d Cpu65h Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cs1d Cpu65h	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cs1d Cpu67h Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cs1d Cpu67h	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cs1d Cpu68ha Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cs1d Cpu68ha	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cs1d Cpu67ha Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cs1d Cpu67ha	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cs1d Cpu65p Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cs1d Cpu65p	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cs1d Cpu67sa Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cs1d Cpu67sa	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cs1d Cpu44sa Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cs1d Cpu44sa	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Sysmac Cs1d Cpu67p Firmware	All versions

Running on/with	Platform Versions
Omron Sysmac Cs1d Cpu67p	All versions

Related CWEs

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (4)

https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/

Source: ot-cert@dragos.com

Third Party Advisory

https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-002_en.pdf

Source: ot-cert@dragos.com

Vendor Advisory

https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-002_en.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.