CVE-2022-45794
Omron CJ-series and CS-series unauthenticated filesystem access.
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC internal memory and memory card.
Un atacante con acceso a la red del PLC afectado (PLC de las series CJ y CS, todas las versiones) puede utilizar un protocolo de red para leer y escribir archivos desde la memoria interna y la tarjeta de memoria del PLC.
*Credits:
Reid Wightman of Dragos, Inc.
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-11-22 CVE Reserved
- 2024-01-10 CVE Published
- 2024-01-24 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-306: Missing Authentication for Critical Function
CAPEC
- CAPEC-165: File Manipulation
References (2)
| URL | Tag | Source |
|---|---|---|
| https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-002_en.pdf | 2024-01-23 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Omron Search vendor "Omron" | Sysmac Cj2h-cpu64-eip Firmware Search vendor "Omron" for product "Sysmac Cj2h-cpu64-eip Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2h-cpu64-eip Search vendor "Omron" for product "Sysmac Cj2h-cpu64-eip" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2h-cpu64 Firmware Search vendor "Omron" for product "Sysmac Cj2h-cpu64 Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2h-cpu64 Search vendor "Omron" for product "Sysmac Cj2h-cpu64" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2h-cpu65-eip Firmware Search vendor "Omron" for product "Sysmac Cj2h-cpu65-eip Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2h-cpu65-eip Search vendor "Omron" for product "Sysmac Cj2h-cpu65-eip" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2h-cpu65 Firmware Search vendor "Omron" for product "Sysmac Cj2h-cpu65 Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2h-cpu65 Search vendor "Omron" for product "Sysmac Cj2h-cpu65" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2h-cpu66-eip Firmware Search vendor "Omron" for product "Sysmac Cj2h-cpu66-eip Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2h-cpu66-eip Search vendor "Omron" for product "Sysmac Cj2h-cpu66-eip" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2h-cpu66 Firmware Search vendor "Omron" for product "Sysmac Cj2h-cpu66 Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2h-cpu66 Search vendor "Omron" for product "Sysmac Cj2h-cpu66" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2h-cpu67-eip Firmware Search vendor "Omron" for product "Sysmac Cj2h-cpu67-eip Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2h-cpu67-eip Search vendor "Omron" for product "Sysmac Cj2h-cpu67-eip" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2h-cpu67 Firmware Search vendor "Omron" for product "Sysmac Cj2h-cpu67 Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2h-cpu67 Search vendor "Omron" for product "Sysmac Cj2h-cpu67" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2h-cpu68-eip Firmware Search vendor "Omron" for product "Sysmac Cj2h-cpu68-eip Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2h-cpu68-eip Search vendor "Omron" for product "Sysmac Cj2h-cpu68-eip" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2h-cpu68 Firmware Search vendor "Omron" for product "Sysmac Cj2h-cpu68 Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2h-cpu68 Search vendor "Omron" for product "Sysmac Cj2h-cpu68" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2m-cpu11 Firmware Search vendor "Omron" for product "Sysmac Cj2m-cpu11 Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2m-cpu11 Search vendor "Omron" for product "Sysmac Cj2m-cpu11" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2m-cpu12 Firmware Search vendor "Omron" for product "Sysmac Cj2m-cpu12 Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2m-cpu12 Search vendor "Omron" for product "Sysmac Cj2m-cpu12" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2m-cpu13 Firmware Search vendor "Omron" for product "Sysmac Cj2m-cpu13 Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2m-cpu13 Search vendor "Omron" for product "Sysmac Cj2m-cpu13" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2m-cpu14 Firmware Search vendor "Omron" for product "Sysmac Cj2m-cpu14 Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2m-cpu14 Search vendor "Omron" for product "Sysmac Cj2m-cpu14" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2m-cpu15 Firmware Search vendor "Omron" for product "Sysmac Cj2m-cpu15 Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2m-cpu15 Search vendor "Omron" for product "Sysmac Cj2m-cpu15" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2m-cpu31 Firmware Search vendor "Omron" for product "Sysmac Cj2m-cpu31 Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2m-cpu31 Search vendor "Omron" for product "Sysmac Cj2m-cpu31" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2m-cpu32 Firmware Search vendor "Omron" for product "Sysmac Cj2m-cpu32 Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2m-cpu32 Search vendor "Omron" for product "Sysmac Cj2m-cpu32" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2m-cpu33 Firmware Search vendor "Omron" for product "Sysmac Cj2m-cpu33 Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2m-cpu33 Search vendor "Omron" for product "Sysmac Cj2m-cpu33" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2m-cpu34 Firmware Search vendor "Omron" for product "Sysmac Cj2m-cpu34 Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2m-cpu34 Search vendor "Omron" for product "Sysmac Cj2m-cpu34" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj2m-cpu35 Firmware Search vendor "Omron" for product "Sysmac Cj2m-cpu35 Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj2m-cpu35 Search vendor "Omron" for product "Sysmac Cj2m-cpu35" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj1g-cpu45p Firmware Search vendor "Omron" for product "Sysmac Cj1g-cpu45p Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj1g-cpu45p Search vendor "Omron" for product "Sysmac Cj1g-cpu45p" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj1g-cpu44p Firmware Search vendor "Omron" for product "Sysmac Cj1g-cpu44p Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj1g-cpu44p Search vendor "Omron" for product "Sysmac Cj1g-cpu44p" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj1g-cpu43p Firmware Search vendor "Omron" for product "Sysmac Cj1g-cpu43p Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj1g-cpu43p Search vendor "Omron" for product "Sysmac Cj1g-cpu43p" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cj1g-cpu42p Firmware Search vendor "Omron" for product "Sysmac Cj1g-cpu42p Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cj1g-cpu42p Search vendor "Omron" for product "Sysmac Cj1g-cpu42p" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cs1h-cpu63h Firmware Search vendor "Omron" for product "Sysmac Cs1h-cpu63h Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cs1h-cpu63h Search vendor "Omron" for product "Sysmac Cs1h-cpu63h" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cs1h-cpu65h Firmware Search vendor "Omron" for product "Sysmac Cs1h-cpu65h Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cs1h-cpu65h Search vendor "Omron" for product "Sysmac Cs1h-cpu65h" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cs1h-cpu67h Firmware Search vendor "Omron" for product "Sysmac Cs1h-cpu67h Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cs1h-cpu67h Search vendor "Omron" for product "Sysmac Cs1h-cpu67h" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cs1h-cpu64h Firmware Search vendor "Omron" for product "Sysmac Cs1h-cpu64h Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cs1h-cpu64h Search vendor "Omron" for product "Sysmac Cs1h-cpu64h" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cs1h-cpu66h Firmware Search vendor "Omron" for product "Sysmac Cs1h-cpu66h Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cs1h-cpu66h Search vendor "Omron" for product "Sysmac Cs1h-cpu66h" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cs1g-cpu44h Firmware Search vendor "Omron" for product "Sysmac Cs1g-cpu44h Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cs1g-cpu44h Search vendor "Omron" for product "Sysmac Cs1g-cpu44h" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cs1g-cpu43h Firmware Search vendor "Omron" for product "Sysmac Cs1g-cpu43h Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cs1g-cpu43h Search vendor "Omron" for product "Sysmac Cs1g-cpu43h" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cs1g-cpu42h Firmware Search vendor "Omron" for product "Sysmac Cs1g-cpu42h Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cs1g-cpu42h Search vendor "Omron" for product "Sysmac Cs1g-cpu42h" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cs1g-cpu45h Firmware Search vendor "Omron" for product "Sysmac Cs1g-cpu45h Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cs1g-cpu45h Search vendor "Omron" for product "Sysmac Cs1g-cpu45h" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cs1d-cpu65h Firmware Search vendor "Omron" for product "Sysmac Cs1d-cpu65h Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cs1d-cpu65h Search vendor "Omron" for product "Sysmac Cs1d-cpu65h" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cs1d-cpu67h Firmware Search vendor "Omron" for product "Sysmac Cs1d-cpu67h Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cs1d-cpu67h Search vendor "Omron" for product "Sysmac Cs1d-cpu67h" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cs1d-cpu68ha Firmware Search vendor "Omron" for product "Sysmac Cs1d-cpu68ha Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cs1d-cpu68ha Search vendor "Omron" for product "Sysmac Cs1d-cpu68ha" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cs1d-cpu67ha Firmware Search vendor "Omron" for product "Sysmac Cs1d-cpu67ha Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cs1d-cpu67ha Search vendor "Omron" for product "Sysmac Cs1d-cpu67ha" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cs1d-cpu65p Firmware Search vendor "Omron" for product "Sysmac Cs1d-cpu65p Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cs1d-cpu65p Search vendor "Omron" for product "Sysmac Cs1d-cpu65p" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cs1d-cpu67sa Firmware Search vendor "Omron" for product "Sysmac Cs1d-cpu67sa Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cs1d-cpu67sa Search vendor "Omron" for product "Sysmac Cs1d-cpu67sa" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cs1d-cpu44sa Firmware Search vendor "Omron" for product "Sysmac Cs1d-cpu44sa Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cs1d-cpu44sa Search vendor "Omron" for product "Sysmac Cs1d-cpu44sa" | - | - |
Safe
|
| Omron Search vendor "Omron" | Sysmac Cs1d-cpu67p Firmware Search vendor "Omron" for product "Sysmac Cs1d-cpu67p Firmware" | - | - |
Affected
| in | Omron Search vendor "Omron" | Sysmac Cs1d-cpu67p Search vendor "Omron" for product "Sysmac Cs1d-cpu67p" | - | - |
Safe
|