CVE-2022-45790

🗓️ 22 Jan 2024 17:22:14Reported by DragosType

The Omron FINS protocol has a vulnerability allowing bruteforce attack on authentication, potentially leading to unauthorized access and manipulation of memory values

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	FINS Protocol Brute Force	11 Oct 202300:00	–	bdu_fstec
Circl	CVE-2022-45790	23 Sep 202317:42	–	circl
CNNVD	Omron SYSMAC CS/CJ/CP Series Security Vulnerability	20 Sep 202300:00	–	cnnvd
Cvelist	CVE-2022-45790 Omron FINS memory protection susceptible to bruteforce	22 Jan 202417:22	–	cvelist
EUVD	EUVD-2022-48646	3 Oct 202520:07	–	euvd
ICS	Omron CJ/CS/CP Series	19 Sep 202306:00	–	ics
NVD	CVE-2022-45790	22 Jan 202418:15	–	nvd
osv_cve	CVE-2022-45790	22 Jan 202418:15	–	osv_cve
Prion	Authentication flaw	22 Jan 202418:15	–	prion
Positive Technologies	PT-2023-5881 · Omron · Omron Fins Protocol	19 Sep 202300:00	–	ptsecurity

NVD

Node

AND

omron cj1g-cpu45p_firmwareRange<4.1

omron cj1g-cpu45pMatch-

Node

AND

omron cj1g-cpu45p-gtc_firmwareRange<4.1

omron cj1g-cpu45p-gtcMatch-

Node

AND

omron cj1g-cpu44p_firmwareRange<4.1

omron cj1g-cpu44pMatch-

Node

AND

omron cj1g-cpu43p_firmwareRange<4.1

omron cj1g-cpu43pMatch-

Node

AND

omron cj1g-cpu42p_firmwareRange<4.1

omron cj1g-cpu42pMatch-

Node

AND

omron cp1e-e_firmwareRange<1.3

omron cp1e-eMatch-

Node

AND

omron cp1e-n_firmwareRange<1.3

omron cp1e-nMatch-

Node

AND

omron cj2h-cpu68_firmwareRange<1.5

omron cj2h-cpu68Match-

Node

AND

omron cj2h-cpu67_firmwareRange<1.5

omron cj2h-cpu67Match-

Node

AND

omron cj2h-cpu66_firmwareRange<1.5

omron cj2h-cpu66Match-

Node

AND

omron cj2h-cpu65_firmwareRange<1.5

omron cj2h-cpu65Match-

Node

AND

omron cj2h-cpu64_firmwareRange<1.5

omron cj2h-cpu64Match-

Node

AND

omron cj2h-cpu68-eip_firmwareRange<1.5

omron cj2h-cpu68-eipMatch-

Node

AND

omron cj2h-cpu67-eip_firmwareRange<1.5

omron cj2h-cpu67-eipMatch-

Node

AND

omron cj2h-cpu66-eip_firmwareRange<1.5

omron cj2h-cpu66-eipMatch-

Node

AND

omron cj2h-cpu65-eip_firmwareRange<1.5

omron cj2h-cpu65-eipMatch-

Node

AND

omron cj2h-cpu64-eip_firmwareRange<1.5

omron cj2h-cpu64-eipMatch-

Node

AND

omron cj2m-cpu35_firmwareRange<2.1

omron cj2m-cpu35Match-

Node

AND

omron cj2m-cpu34_firmwareRange<2.1

omron cj2m-cpu34Match-

Node

AND

omron cj2m-cpu33_firmwareRange<2.1

omron cj2m-cpu33Match-

Node

AND

omron cj2m-cpu32_firmwareRange<2.1

omron cj2m-cpu32Match-

Node

AND

omron cj2m-cpu31_firmwareRange<2.1

omron cj2m-cpu31Match-

Node

AND

omron cj2m-cpu15_firmwareRange<2.1

omron cj2m-cpu15Match-

Node

AND

omron cj2m-cpu14_firmwareRange<2.1

omron cj2m-cpu14Match-

Node

AND

omron cj2m-cpu13_firmwareRange<2.1

omron cj2m-cpu13Match-

Node

AND

omron cj2m-cpu12_firmwareRange<2.1

omron cj2m-cpu12Match-

Node

AND

omron cj2m-cpu11_firmwareRange<2.1

omron cj2m-cpu11Match-

Node

AND

omron cj2m-md211_firmwareRange<2.1

omron cj2m-md211Match-

Node

AND

omron cj2m-md212_firmwareRange<2.1

omron cj2m-md212Match-

Node

AND

omron cs1d-cpu67s_firmwareRange<2.1

omron cs1d-cpu67sMatch-

Node

AND

omron cs1d-cpu65s_firmwareRange<2.1

omron cs1d-cpu65sMatch-

Node

AND

omron cs1d-cpu44s_firmwareRange<2.1

omron cs1d-cpu44sMatch-

Node

AND

omron cs1d-cpu42s_firmwareRange<2.1

omron cs1d-cpu42sMatch-

Node

AND

omron cs1d-cpu65p_firmwareRange<1.4

omron cs1d-cpu65pMatch-

Node

AND

omron cs1d-cpu67p_firmwareRange<1.4

omron cs1d-cpu67pMatch-

Node

AND

omron cs1d-cpu67h_firmwareRange<1.4

omron cs1d-cpu67hMatch-

Node

AND

omron cs1d-cpu65h_firmwareRange<1.4

omron cs1d-cpu65hMatch-

Node

AND

omron cs1h-cpu67h_firmwareRange<4.1

omron cs1h-cpu67hMatch-

Node

AND

omron cs1h-cpu66h_firmwareRange<4.1

omron cs1h-cpu66hMatch-

Node

AND

omron cs1h-cpu65h_firmwareRange<4.1

omron cs1h-cpu65hMatch-

Node

AND

omron cs1h-cpu64h_firmwareRange<4.1

omron cs1h-cpu64hMatch-

Node

AND

omron cs1h-cpu63h_firmwareRange<4.1

omron cs1h-cpu63hMatch-

Node

AND

omron cs1g-cpu45h_firmwareRange<4.1

omron cs1g-cpu45hMatch-

Node

AND

omron cs1g-cpu44h_firmwareRange<4.1

omron cs1g-cpu44hMatch-

Node

AND

omron cs1g-cpu43h_firmwareRange<4.1

omron cs1g-cpu43hMatch-

Node

AND

omron cs1g-cpu42h_firmwareRange<4.1

omron cs1g-cpu42hMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "CJ-series and CS-series CPU modules",
    "vendor": "Omron",
    "versions": [
      {
        "lessThan": "1.5",
        "status": "affected",
        "version": "CJ2H 0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "2.1",
        "status": "affected",
        "version": "CJ2M 0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.1",
        "status": "affected",
        "version": "CJ1G 0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.1",
        "status": "affected",
        "version": "CS1H 0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.1",
        "status": "affected",
        "version": "CS1G 0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "1.4",
        "status": "affected",
        "version": "CS1D-H 0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "1.3",
        "status": "affected",
        "version": "CP1E-E 0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "1.3",
        "status": "affected",
        "version": "CP1E-N 0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "1.4",
        "status": "affected",
        "version": "CS1D-P 0.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-262-05
fa	www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-010_en.pdf
dragos	www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/

17 Jun 2026 05:10Current

9.1Critical risk

Vulners AI Score9.1

CVSS 3.18.6 - 9.1

EPSS0.00905

SSVC

CWE-307