Omron CP1L-EL20DR-D Memory Arbitrary Read/Write (CVE-2023-22357)

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the...

The vulnerability of the Factory Interface Network Service (FINS) protocol implementation in the microcomputer-based programmable logic controllers OMRON CP1L-EL20DR-D allows a intruder to gain access to read, modify, or delete files, execute arbitrary code, or cause a service failure.

The vulnerability of the Factory Interface Network Service FINS protocol implementation in the microcomputer-based programmable logic controllers OMRON CP1L-EL20DR-D is related to insufficient protection of service data during code debugging. Exploiting this vulnerability can allow an attacker to...

CVE-2023-22357

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the...

Design/Logic Flaw

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the...

CVE-2023-22357

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the...

CVE-2023-22357

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the...

CVE-2023-22357

CVE-2023-22357 affects the Omron CP1L-EL20DR-D PLC (all versions). The issue is active debug code that allows a remote, unauthenticated attacker to execute commands outside the FINS protocol, enabling read/write access to memory. This can lead to firmware overwrites, DoS, or arbitrary code execut...

PT-2023-08: Reading and modifying the entire device memory in PLC OMRON CP1-EL20DR-D

The vulnerability was identified in OMRON CP1L-EL20DR-D all versions. The discovered vulnerability may lead to a command that is not specified in FINS protocol, which can be executed without authentication. A remote attacker may read/write in the device memory, which may lead to overwriting the...

Denial of Service Vulnerability in Omron CP1L-EM40DR-D

The Omron CP1L-EM40DR-D is a programmable logic controller from Omron Japan. A denial of service vulnerability exists in the Omron CP1L-EM40DR-D, which can be exploited by an attacker to cause a denial of service on the device...

Omron CP1L-M30DR-D PLC Detection

Binary data 755949.prm...

Omron CP1L-L14DR-D PLC Detection

Binary data 755959.prm...

Omron CP1L-M30DT-A PLC Detection

Binary data 755948.prm...

Omron CP1L-L20DT-D PLC Detection

Binary data 755955.prm...

Omron CP1L-EL20DT1-D PLC Detection

Binary data 755936.prm...

Omron CP1L-EM40DT-D PLC Detection

Binary data 755929.prm...

Omron CP1L-L10DR-A PLC Detection

Binary data 755962.prm...

Omron CP1L-EL20DT-D PLC Detection

Binary data 755935.prm...

Omron CP1L-M30DR-A PLC Detection

Binary data 755947.prm...

Omron CP1L-EM30DR-D PLC Detection

Binary data 755931.prm...

Omron CP1L-L14DT-A PLC Detection

Binary data 755958.prm...