CVE-2022-45790

🗓️ 22 Jan 2024 17:22:14Reported by DragosType

The Omron FINS protocol has a vulnerability allowing bruteforce attack on authentication, potentially leading to unauthorized access and manipulation of memory values

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-45790	23 Sep 202317:42	–	circl
CNNVD	Omron SYSMAC CS/CJ/CP Series Security Vulnerability	20 Sep 202300:00	–	cnnvd
Cvelist	CVE-2022-45790 Omron FINS memory protection susceptible to bruteforce	22 Jan 202417:22	–	cvelist
EUVD	EUVD-2022-48646	3 Oct 202520:07	–	euvd
ICS	Omron CJ/CS/CP Series	19 Sep 202306:00	–	ics
NVD	CVE-2022-45790	22 Jan 202418:15	–	nvd
OSV	CVE-2022-45790	22 Jan 202418:15	–	osv
Prion	Authentication flaw	22 Jan 202418:15	–	prion
Positive Technologies	PT-2023-5881 · Omron · Omron Fins Protocol	19 Sep 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-45790	5 Feb 202522:29	–	redhatcve

NVD

Node

omron cj1g-cpu45p_firmwareRange<4.1

AND

omron cj1g-cpu45pMatch-

Node

omron cj1g-cpu45p-gtc_firmwareRange<4.1

AND

omron cj1g-cpu45p-gtcMatch-

Node

omron cj1g-cpu44p_firmwareRange<4.1

AND

omron cj1g-cpu44pMatch-

Node

omron cj1g-cpu43p_firmwareRange<4.1

AND

omron cj1g-cpu43pMatch-

Node

omron cj1g-cpu42p_firmwareRange<4.1

AND

omron cj1g-cpu42pMatch-

Node

omron cp1e-e_firmwareRange<1.3

AND

omron cp1e-eMatch-

Node

omron cp1e-n_firmwareRange<1.3

AND

omron cp1e-nMatch-

Node

omron cj2h-cpu68_firmwareRange<1.5

AND

omron cj2h-cpu68Match-

Node

omron cj2h-cpu67_firmwareRange<1.5

AND

omron cj2h-cpu67Match-

Node

omron cj2h-cpu66_firmwareRange<1.5

AND

omron cj2h-cpu66Match-

Node

omron cj2h-cpu65_firmwareRange<1.5

AND

omron cj2h-cpu65Match-

Node

omron cj2h-cpu64_firmwareRange<1.5

AND

omron cj2h-cpu64Match-

Node

omron cj2h-cpu68-eip_firmwareRange<1.5

AND

omron cj2h-cpu68-eipMatch-

Node

omron cj2h-cpu67-eip_firmwareRange<1.5

AND

omron cj2h-cpu67-eipMatch-

Node

omron cj2h-cpu66-eip_firmwareRange<1.5

AND

omron cj2h-cpu66-eipMatch-

Node

omron cj2h-cpu65-eip_firmwareRange<1.5

AND

omron cj2h-cpu65-eipMatch-

Node

omron cj2h-cpu64-eip_firmwareRange<1.5

AND

omron cj2h-cpu64-eipMatch-

Node

omron cj2m-cpu35_firmwareRange<2.1

AND

omron cj2m-cpu35Match-

Node

omron cj2m-cpu34_firmwareRange<2.1

AND

omron cj2m-cpu34Match-

Node

omron cj2m-cpu33_firmwareRange<2.1

AND

omron cj2m-cpu33Match-

Node

omron cj2m-cpu32_firmwareRange<2.1

AND

omron cj2m-cpu32Match-

Node

omron cj2m-cpu31_firmwareRange<2.1

AND

omron cj2m-cpu31Match-

Node

omron cj2m-cpu15_firmwareRange<2.1

AND

omron cj2m-cpu15Match-

Node

omron cj2m-cpu14_firmwareRange<2.1

AND

omron cj2m-cpu14Match-

Node

omron cj2m-cpu13_firmwareRange<2.1

AND

omron cj2m-cpu13Match-

Node

omron cj2m-cpu12_firmwareRange<2.1

AND

omron cj2m-cpu12Match-

Node

omron cj2m-cpu11_firmwareRange<2.1

AND

omron cj2m-cpu11Match-

Node

omron cj2m-md211_firmwareRange<2.1

AND

omron cj2m-md211Match-

Node

omron cj2m-md212_firmwareRange<2.1

AND

omron cj2m-md212Match-

Node

omron cs1d-cpu67s_firmwareRange<2.1

AND

omron cs1d-cpu67sMatch-

Node

omron cs1d-cpu65s_firmwareRange<2.1

AND

omron cs1d-cpu65sMatch-

Node

omron cs1d-cpu44s_firmwareRange<2.1

AND

omron cs1d-cpu44sMatch-

Node

omron cs1d-cpu42s_firmwareRange<2.1

AND

omron cs1d-cpu42sMatch-

Node

omron cs1d-cpu65p_firmwareRange<1.4

AND

omron cs1d-cpu65pMatch-

Node

omron cs1d-cpu67p_firmwareRange<1.4

AND

omron cs1d-cpu67pMatch-

Node

omron cs1d-cpu67h_firmwareRange<1.4

AND

omron cs1d-cpu67hMatch-

Node

omron cs1d-cpu65h_firmwareRange<1.4

AND

omron cs1d-cpu65hMatch-

Node

omron cs1h-cpu67h_firmwareRange<4.1

AND

omron cs1h-cpu67hMatch-

Node

omron cs1h-cpu66h_firmwareRange<4.1

AND

omron cs1h-cpu66hMatch-

Node

omron cs1h-cpu65h_firmwareRange<4.1

AND

omron cs1h-cpu65hMatch-

Node

omron cs1h-cpu64h_firmwareRange<4.1

AND

omron cs1h-cpu64hMatch-

Node

omron cs1h-cpu63h_firmwareRange<4.1

AND

omron cs1h-cpu63hMatch-

Node

omron cs1g-cpu45h_firmwareRange<4.1

AND

omron cs1g-cpu45hMatch-

Node

omron cs1g-cpu44h_firmwareRange<4.1

AND

omron cs1g-cpu44hMatch-

Node

omron cs1g-cpu43h_firmwareRange<4.1

AND

omron cs1g-cpu43hMatch-

Node

omron cs1g-cpu42h_firmwareRange<4.1

AND

omron cs1g-cpu42hMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "CJ-series and CS-series CPU modules",
    "vendor": "Omron",
    "versions": [
      {
        "lessThan": "1.5",
        "status": "affected",
        "version": "CJ2H 0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "2.1",
        "status": "affected",
        "version": "CJ2M 0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.1",
        "status": "affected",
        "version": "CJ1G 0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.1",
        "status": "affected",
        "version": "CS1H 0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.1",
        "status": "affected",
        "version": "CS1G 0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "1.4",
        "status": "affected",
        "version": "CS1D-H 0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "1.3",
        "status": "affected",
        "version": "CP1E-E 0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "1.3",
        "status": "affected",
        "version": "CP1E-N 0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "1.4",
        "status": "affected",
        "version": "CS1D-P 0.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
fa	www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-010_en.pdf
dragos	www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-262-05

21 Nov 2024 07:29Current

9.1High risk

Vulners AI Score9.1

CVSS 3.18.6 - 9.1

EPSS0.00389

SSVC

CWE-307