CVE-2023-38744

🗓️ 03 Aug 2023 04:55:52Reported by jpcertType

CVE-2023-38744 DoS vulnerability in EtherNet/IP port of CJ/CJ2 CPU uni

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-38744	3 Aug 202312:40	–	circl
CNNVD	Omron CJ Series Security Vulnerability	1 Aug 202300:00	–	cnnvd
Cvelist	CVE-2023-38744	3 Aug 202304:55	–	cvelist
EUVD	EUVD-2023-42519	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	OMRON CJ series and CS/CJ Series EtherNet/IT unit vulnerable to Denial-of-Service (DoS)	3 Aug 202304:45	–	jvn
NVD	CVE-2023-38744	3 Aug 202305:15	–	nvd
Prion	Input validation	3 Aug 202305:15	–	prion
Positive Technologies	PT-2023-26580 · Omron · Cj2H Cpu Unit +2	3 Aug 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-38744	23 May 202504:09	–	redhatcve
Tenable Nessus	Omron CS/CJ Series Denial of Service (CVE-2023-38744)	11 Aug 202300:00	–	nessus

NVD

Vulners

Node

omron cj2m-cpu35_firmwareRange≤2.18

AND

omron cj2m-cpu35Match-

Node

omron cj2m-cpu34_firmwareRange≤2.18

AND

omron cj2m-cpu34Match-

Node

omron cj2m-cpu33_firmwareRange≤2.18

AND

omron cj2m-cpu33Match-

Node

omron cj2m-cpu32_firmwareRange≤2.18

AND

omron cj2m-cpu32Match-

Node

omron cj2m-cpu31_firmwareRange≤2.18

AND

omron cj2m-cpu31Match-

Node

omron cj2h-cpu68-eip_firmwareRange≤3.04

AND

omron cj2h-cpu68-eipMatch-

Node

omron cj2h-cpu67-eip_firmwareRange≤3.04

AND

omron cj2h-cpu67-eipMatch-

Node

omron cj2h-cpu66-eip_firmwareRange≤3.04

AND

omron cj2h-cpu66-eipMatch-

Node

omron cj2h-cpu65-eip_firmwareRange≤3.04

AND

omron cj2h-cpu65-eipMatch-

Node

omron cj2h-cpu64-eip_firmwareRange≤3.04

AND

omron cj2h-cpu64-eipMatch-

Node

omron cs1w-eip21_firmwareRange≤3.04

AND

omron cs1w-eip21Match-

Node

omron cj1w-eip21_firmwareRange≤3.04

AND

omron cj1w-eip21Match-

[
  {
    "vendor": "OMRON Corporation",
    "product": "CJ2M CPU Unit",
    "versions": [
      {
        "version": "CJ2M-CPU3[] Unit version of the built-in EtherNet/IP section Ver. 2.18 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "OMRON Corporation",
    "product": "CJ2H CPU Unit",
    "versions": [
      {
        "version": "CJ2H-CPU6[]-EIP Unit version of the built-in EtherNet/IP section Ver. 3.04 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "OMRON Corporation",
    "product": "CS/CJ Series EtherNet/IP Unit",
    "versions": [
      {
        "version": "CS1W-EIP21 V3.04 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "OMRON Corporation",
    "product": "CS/CJ Series EtherNet/IP Unit",
    "versions": [
      {
        "version": "CJ1W-EIP21 V3.04 and earlier",
        "status": "affected"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/vu/JVNVU92193064/
ia	www.ia.omron.com/product/vulnerability/OMSR-2023-006_en.pdf

21 Nov 2024 08:14Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.0035

SSVC

CWE-1284