CVE-2023-0811

Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII...

CVE-2023-0811

CVE-2023-0811 affects Omron CJ1M unit versions 4.0 and earlier, with improper access controls on the memory region storing the UM password. An adversary could trigger a PROGRAM AREA WRITE to overwrite the password, potentially disabling UM protections or setting a non-ASCII password, preventing e...

CVE-2023-0811

Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII...

PT-2023-16540 · Omron · Omron Cj1M

Name of the Vulnerable Software and Affected Versions: Omron CJ1M unit versions 4.0 and prior Description: The issue is related to improper access controls on the memory region where the UM password is stored. An adversary can issue a PROGRAM AREA WRITE command to a specific memory region,...

Omron PLC CJ series 访问控制错误漏洞

The Omron PLC CJ series is a CJ series programmable logic controller PLC from Omron Japan. An Access Control Error vulnerability exists in Omron CJ1M PLC v4.0 and earlier versions, which arises from incorrect access control to a memory area where the UM password is stored...

Omron CX-One CXP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CXP...

Omron CX-One CXP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CXP...

Omron CX-One CXP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CXP...

CISA Releases Six Industrial Control Systems Advisories

CISA released six Industrial Control Systems ICS advisories on February 9, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...

The vulnerability of the Factory Interface Network Service (FINS) protocol implementation in the microcomputer-based programmable logic controllers OMRON CP1L-EL20DR-D allows a intruder to gain access to read, modify, or delete files, execute arbitrary code, or cause a service failure.

The vulnerability of the Factory Interface Network Service FINS protocol implementation in the microcomputer-based programmable logic controllers OMRON CP1L-EL20DR-D is related to insufficient protection of service data during code debugging. Exploiting this vulnerability can allow an attacker to...

CVE-2023-22322

Improper restriction of XML external entity reference XXE vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed...

CVE-2023-22322

Improper restriction of XML external entity reference XXE vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed...

Xxe

Improper restriction of XML external entity reference XXE vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed...

CVE-2023-22322

Improper restriction of XML external entity reference XXE vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed...

CVE-2023-22322

Improper restriction of XML external entity reference XXE vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed...

CVE-2023-22322

CVE-2023-22322 affects OMRON CX-Motion Pro prior to 1.4.6.014, with an XXE flaw that can disclose sensitive filesystem data when a user opens a crafted project file. Root cause: improper restriction of XML external entity references in CX-Motion Pro 1.4.6.013 and earlier. Impact: potential exposu...

CX-Motion Pro 代码问题漏洞

OMRON CX-Motion Pro is a powerful and easy-to-use server security software from OMRON. A security vulnerability exists in CX-Motion Pro 1.4.6.013 and earlier versions, which originates from the fact that if a user opens a specially crafted project file that has been created by an attacker, it may...

PT-2023-2420 · Omron · Omron Cs Series

Name of the Vulnerable Software and Affected Versions: Omron CJ-series and CS-series PLCs, all versions Description: The issue is related to the lack of authentication for a critical function in Omron CS/CJ controllers. An attacker with network access to the affected PLC may use a network protoco...

CVE-2023-22357

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the...

Design/Logic Flaw

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the...