critical
9.1
CWE
307
Advisory Published
Updated

CVE-2022-45790: Omron FINS memory protection susceptible to bruteforce

First published: Mon Jan 22 2024(Updated: )

The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected memory. This access can allow overwrite of values including programmed logic.

Credit: ot-cert@dragos.com

Affected SoftwareAffected VersionHow to fix
All of
Omron Cj1g-cpu45p Firmware<4.1
Omron Cj1g-cpu45p
All of
Omron Cj1g-cpu45p-gtc Firmware<4.1
Omron Cj1g-cpu45p-gtc
All of
Omron Cj1g-cpu44p Firmware<4.1
Omron Cj1g-cpu44p
All of
Omron Cj1g-cpu43p Firmware<4.1
Omron Cj1g-cpu43p
All of
Omron Cj1g-cpu42p Firmware<4.1
Omron Cj1g-cpu42p
All of
Omron Cp1e-e Firmware<1.3
Omron Cp1e-e
All of
Omron Cp1e-n Firmware<1.3
Omron Cp1e-n
All of
Omron Cj2h-cpu68 Firmware<1.5
Omron Cj2h-cpu68
All of
Omron Cj2h-cpu67 Firmware<1.5
Omron Cj2h-cpu67
All of
Omron Cj2h-cpu66 Firmware<1.5
Omron Cj2h-cpu66
All of
Omron Cj2h-cpu65 Firmware<1.5
Omron Cj2h-cpu65
All of
Omron Cj2h-cpu64 Firmware<1.5
Omron Cj2h-cpu64
All of
Omron Cj2h-cpu68-eip Firmware<1.5
Omron Cj2h-cpu68-eip
All of
Omron Cj2h-cpu67-eip Firmware<1.5
Omron Cj2h-cpu67-eip
All of
Omron Cj2h-cpu66-eip Firmware<1.5
Omron Cj2h-cpu66-eip
All of
Omron Cj2h-cpu65-eip Firmware<1.5
Omron Cj2h-cpu65-eip
All of
Omron Cj2h-cpu64-eip Firmware<1.5
Omron Cj2h-cpu64-eip
All of
Omron Cj2m-cpu35 Firmware<2.1
Omron Cj2m-cpu35
All of
Omron Cj2m-cpu34 Firmware<2.1
Omron Cj2m-cpu34
All of
Omron Cj2m-cpu33 Firmware<2.1
Omron Cj2m-cpu33
All of
Omron Cj2m-cpu32 Firmware<2.1
Omron Cj2m-cpu32
All of
Omron Cj2m-cpu31 Firmware<2.1
Omron Cj2m-cpu31
All of
Omron Cj2m-cpu15 Firmware<2.1
Omron Cj2m-cpu15
All of
Omron Cj2m-cpu14 Firmware<2.1
Omron Cj2m-cpu14
All of
Omron Cj2m-cpu13 Firmware<2.1
Omron Cj2m-cpu13
All of
Omron Cj2m-cpu12 Firmware<2.1
Omron Cj2m-cpu12
All of
Omron Cj2m-cpu11 Firmware<2.1
Omron Cj2m-cpu11
All of
Omron Cj2m-md211 Firmware<2.1
Omron Cj2m-md211
All of
Omron Cj2m-md212 Firmware<2.1
Omron Cj2m-md212
All of
Omron Cs1d-cpu67s Firmware<2.1
Omron Cs1d-cpu67s
All of
Omron Cs1d-cpu65s Firmware<2.1
Omron Cs1d-cpu65s
All of
Omron Cs1d-cpu44s Firmware<2.1
Omron Cs1d-cpu44s
All of
Omron Cs1d-cpu42s Firmware<2.1
Omron Cs1d-cpu42s
All of
Omron Cs1d-cpu65p Firmware<1.4
Omron Cs1d-cpu65p
All of
Omron Cs1d-cpu67p Firmware<1.4
Omron Cs1d-cpu67p
All of
Omron Cs1d-cpu67h Firmware<1.4
Omron Cs1d-cpu67h
All of
Omron Cs1d-cpu65h Firmware<1.4
Omron Cs1d-cpu65h
All of
Omron Cs1h-cpu67h Firmware<4.1
Omron Cs1h-cpu67h
All of
Omron Cs1h-cpu66h Firmware<4.1
Omron Cs1h-cpu66h
All of
Omron Cs1h-cpu65h Firmware<4.1
Omron Cs1h-cpu65h
All of
Omron Cs1h-cpu64h Firmware<4.1
Omron Cs1h-cpu64h
All of
Omron Cs1h-cpu63h Firmware<4.1
Omron Cs1h-cpu63h
All of
Omron Cs1g-cpu45h Firmware<4.1
Omron Cs1g-cpu45h
All of
Omron Cs1g-cpu44h Firmware<4.1
Omron Cs1g-cpu44h
All of
Omron Cs1g-cpu43h Firmware<4.1
Omron Cs1g-cpu43h
All of
Omron Cs1g-cpu42h Firmware<4.1
Omron Cs1g-cpu42h

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203