CVE-2023-22322

Improper restriction of XML external entity reference XXE vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed...

CVE-2023-22322

CVE-2023-22322 affects OMRON CX-Motion Pro prior to 1.4.6.014, with an XXE flaw that can disclose sensitive filesystem data when a user opens a crafted project file. Root cause: improper restriction of XML external entity references in CX-Motion Pro 1.4.6.013 and earlier. Impact: potential exposu...

CX-Motion Pro 代码问题漏洞

OMRON CX-Motion Pro is a powerful and easy-to-use server security software from OMRON. A security vulnerability exists in CX-Motion Pro 1.4.6.013 and earlier versions, which originates from the fact that if a user opens a specially crafted project file that has been created by an attacker, it may...

PT-2023-2420 · Omron · Omron Cs Series

Name of the Vulnerable Software and Affected Versions: Omron CJ-series and CS-series PLCs, all versions Description: The issue is related to the lack of authentication for a critical function in Omron CS/CJ controllers. An attacker with network access to the affected PLC may use a network protoco...

CVE-2023-22357

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the...

Design/Logic Flaw

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the...

CVE-2023-22357: Active Debug Code

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the...

CVE-2023-22357

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the...

CVE-2023-22357

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the...

CVE-2023-22357

CVE-2023-22357 affects the Omron CP1L-EL20DR-D PLC (all versions). The issue is active debug code that allows a remote, unauthenticated attacker to execute commands outside the FINS protocol, enabling read/write access to memory. This can lead to firmware overwrites, DoS, or arbitrary code execut...

Active debug code vulnerability in OMRON CP1L-EL20DR-D

Overview Active debug code CWE-489 exists in CP1L-EL20DR-D provided by OMRON Corporation, which may lead to a command that is not specified in FINS protocol being executed without authentication. Georgy Kiguradze of Positive Technologies reported this vulnerability to JPCERT/CC. JPCERT/CC...

Access of uninitialized pointer vulnerability in OMRON CX-Motion-MCH

Overview CX-Motion-MCH provided by OMRON Corporation contains an access of uninitialized pointer vulnerability CWE-824, CVE-2023-22366. Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact Having a user to open a specially crafted project file...

PT-2023-08: Reading and modifying the entire device memory in PLC OMRON CP1-EL20DR-D

The vulnerability was identified in OMRON CP1L-EL20DR-D all versions. The discovered vulnerability may lead to a command that is not specified in FINS protocol, which can be executed without authentication. A remote attacker may read/write in the device memory, which may lead to overwriting the...

Omron CP1L-EL20DR-D 安全漏洞

The Omron CP1L-EL20DR-D is a programmable controller from Omron Japan. A security vulnerability exists in the Omron CP1L-EL20DR-D. An attacker could exploit the vulnerability to cause unspecified commands in the FINS protocol to be executed without authentication...

Omron CX-Motion-MCH 缓冲区错误漏洞

Omron CX-Motion-MCH is an advanced motion application programming and configuration software from Omron Corporation Japan. A security vulnerability exists in Omron CX-Motion-MCH versions prior to v2.32 that stems from the inclusion of an uninitialized pointer vulnerability...

PT-2022-6229 · Omron · Omron Cp1L-El20Dr-D

Name of the Vulnerable Software and Affected Versions: OMRON CP1L-EL20DR-D all versions Description: The issue is related to the implementation of the Factory Interface Network Service FINS protocol in the OMRON CP1L-EL20DR-D programmable logic controller's firmware, specifically due to...

Omron CX-Programmer

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Omron Equipment: CX-Programmer Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability could allow arbitrary code execution or loss of sensitive information if a user opens a...

Use-after-free vulnerability in Omron CX-Drive

Overview CX-Drive provided by Omron Corporation contains a use-after-free vulnerability CWE-416. Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact By having a user to open a specially crafted file, arbitrary code may be executed. Solution...

Omron CX-Drive 资源管理错误漏洞

Omron CX-Drive is a CX drive software for inverters and servos from Omron Japan. A security vulnerability exists in Omron CX-Drive V3.00 and earlier versions, which stems from the fact that CX-Drive contains a post-release reuse, which can be exploited by an attacker to allow execution of arbitra...

The vulnerability of the software package for creating the position control system CX-Position, which is part of the Omron CX-One software suite, lies in the ability to write data beyond the buffer memory. This allows a hacker to execute arbitrary code.

The vulnerability of the software package for creating the position control system CX-Position, which is part of the Omron CX-One software suite, relates to the ability to write data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary...