CVE-2022-45794: Omron CJ-series and CS-series unauthenticated filesystem access.
Published Jan 10, 2024
·Updated
An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC internal memory and memory card.
Affected Software
82 affected components
All of the following
Omron Sysmac Cj2h-cpu64-eip Firmware
Omron Sysmac Cj2h-cpu64-eip
All of the following
Omron Sysmac Cj2h-cpu64 Firmware
Omron Sysmac Cj2h-cpu64
All of the following
Omron Sysmac Cj2h-cpu65-eip Firmware
Omron Sysmac Cj2h-cpu65-eip
All of the following
Omron Sysmac Cj2h-cpu65 Firmware
Omron Sysmac Cj2h-cpu65
All of the following
Omron Sysmac Cj2h-cpu66-eip Firmware
Omron Sysmac Cj2h-cpu66-eip
All of the following
Omron Sysmac Cj2h-cpu66 Firmware
Omron Sysmac Cj2h-cpu66
All of the following
Omron Sysmac Cj2h-cpu67-eip Firmware
Omron Sysmac Cj2h-cpu67-eip
All of the following
Omron Sysmac Cj2h-cpu67 Firmware
Omron Sysmac Cj2h-cpu67
All of the following
Omron Sysmac Cj2h-cpu68-eip Firmware
Omron Sysmac Cj2h-cpu68-eip
All of the following
Omron Sysmac Cj2h-cpu68 Firmware
Omron Sysmac Cj2h-cpu68
All of the following
Omron Sysmac Cj2m-cpu11 Firmware
Omron Sysmac Cj2m-cpu11
All of the following
Omron Sysmac Cj2m-cpu12 Firmware
Omron Sysmac Cj2m-cpu12
All of the following
Omron Sysmac Cj2m-cpu13 Firmware
Omron Sysmac Cj2m-cpu13
All of the following
Omron Sysmac Cj2m-cpu14 Firmware
Omron Sysmac Cj2m-cpu14
All of the following
Omron Sysmac Cj2m-cpu15 Firmware
Omron Sysmac Cj2m-cpu15
All of the following
Omron Sysmac Cj2m-cpu31 Firmware
Omron Sysmac Cj2m-cpu31
All of the following
Omron Sysmac Cj2m-cpu32 Firmware
Omron Sysmac Cj2m-cpu32
All of the following
Omron Sysmac Cj2m-cpu33 Firmware
Omron Sysmac Cj2m-cpu33
All of the following
Omron Sysmac Cj2m-cpu34 Firmware
Omron Sysmac Cj2m-cpu34
All of the following
Omron Sysmac Cj2m-cpu35 Firmware
Omron Sysmac Cj2m-cpu35
All of the following
Omron Sysmac Cj1g-cpu45p Firmware
Omron Sysmac Cj1g-cpu45p
All of the following
Omron Sysmac Cj1g-cpu44p Firmware
Omron Sysmac Cj1g-cpu44p
All of the following
Omron Sysmac Cj1g-cpu43p Firmware
Omron Sysmac Cj1g-cpu43p
All of the following
Omron Sysmac Cj1g-cpu42p Firmware
Omron Sysmac Cj1g-cpu42p
All of the following
Omron Sysmac Cs1h-cpu63h Firmware
Omron Sysmac Cs1h-cpu63h
All of the following
Omron Sysmac Cs1h-cpu65h Firmware
Omron Sysmac Cs1h-cpu65h
All of the following
Omron Sysmac Cs1h-cpu67h Firmware
Omron Sysmac Cs1h-cpu67h
All of the following
Omron Sysmac Cs1h-cpu64h Firmware
Omron Sysmac Cs1h-cpu64h
All of the following
Omron Sysmac Cs1h-cpu66h Firmware
Omron Sysmac Cs1h-cpu66h
All of the following
Omron Sysmac Cs1g-cpu44h Firmware
Omron Sysmac Cs1g-cpu44h
All of the following
Omron Sysmac Cs1g-cpu43h Firmware
Omron Sysmac Cs1g-cpu43h
All of the following
Omron Sysmac Cs1g-cpu42h Firmware
Omron Sysmac Cs1g-cpu42h
All of the following
Omron Sysmac Cs1g-cpu45h Firmware
Omron Sysmac Cs1g-cpu45h
All of the following
Omron Sysmac Cs1d-cpu65h Firmware
Omron Sysmac Cs1d-cpu65h
All of the following
Omron Sysmac Cs1d-cpu67h Firmware
Omron Sysmac Cs1d-cpu67h
All of the following
Omron Sysmac Cs1d-cpu68ha Firmware
Omron Sysmac Cs1d-cpu68ha
All of the following
Omron Sysmac Cs1d-cpu67ha Firmware
Omron Sysmac Cs1d-cpu67ha
All of the following
Omron Sysmac Cs1d-cpu65p Firmware
Omron Sysmac Cs1d-cpu65p
All of the following
Omron Sysmac Cs1d-cpu67sa Firmware
Omron Sysmac Cs1d-cpu67sa
All of the following
Omron Sysmac Cs1d-cpu44sa Firmware
Omron Sysmac Cs1d-cpu44sa
All of the following
Omron Sysmac Cs1d-cpu67p Firmware
Omron Sysmac Cs1d-cpu67p
Event History
Jan 10, 2024
CVE Published
via MITRE·10:56 PM
Data Sourced
via MITRE·10:56 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-45794?
CVE-2022-45794 has been categorized as a critical vulnerability due to its potential to allow unauthorized access to PLC internal memory.
2
What devices are affected by CVE-2022-45794?
CVE-2022-45794 affects various Omron Sysmac CJ and CS series PLCs, including CJ2H, CJ2M, and CS1H models.
3
How can I mitigate CVE-2022-45794?
Mitigation for CVE-2022-45794 involves restricting network access to the affected PLCs and applying available firmware updates.
4
What kind of attack can exploit CVE-2022-45794?
CVE-2022-45794 can be exploited by attackers with network access through a protocol that allows reading and writing files on PLC memory.
5
Is there a fix available for CVE-2022-45794?
Yes, users should check for the latest firmware updates from Omron to address the vulnerabilities associated with CVE-2022-45794.