CVE-2023-0811: Critical severity omron sysmac cj-series vulnerability

Published Mar 16, 2023

Updated

Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.

Affected Software

282 affected components

Omron SYSMAC CJ-series CJ2H-CPU6 □ -EIP: All versions CJ2H-CPU6 □: All versions CJ2M-CPU □ □: All versions CJ1G-CPU □ □ P

Omron CJ2H-CPU6 □ -EIP

Omron CJ2H-CPU6 □

Omron CJ2M-CPU □ □

Omron CJ1G-CPU □ □ P

Omron SYSMAC CS-series CS1H-CPU □ □ H: All versions CS1G-CPU □ □ H: All versions CS1D-CPU □ □ HA: All versions CS1D-CPU □ □ H: All versions CS1D-CPU □ □ SA: All versions CS1D-CPU □ □ S: All versions CS1D-CPU □ □ P

Omron CS1H-CPU □ □ H

Omron CS1G-CPU □ □ H

Omron CS1D-CPU □ □ HA

Omron CS1D-CPU □ □ H

Omron CS1D-CPU □ □ SA

Omron CS1D-CPU □ □ S

Omron CS1D-CPU □ □ P

Omron SYSMAC CP-series CP2E-E □ □ D □ - □: All versions CP2E-S □ □ D □- □ All versions CP2E-N □ □ D □ - □: All versions CP1H-X40D □ - □: All versions CP1H-XA40D □ - □: All versions CP1H-Y20DT-D: All versions CP1L-EL20D □ - □: All versions CP1L-EM □ □ D □ - □: All versions CP1L-L □ □ D □- □: All versions CP1L-M □ □ D □ - □: All versions CP1E-E □ □ D □ - □: All versions CP1E-NA □ □ D □ - □

Omron CP2E-E □ □ D □ - □

Omron CP2E-S □ □ D □- □ All versions

Omron CP2E-N □ □ D □ - □

Omron CP1H-X40D □ - □

Omron CP1H-XA40D □ - □

Omron CP1H-Y20DT-D

Omron CP1L-EL20D □ - □

Omron CP1L-EM □ □ D □ - □

Omron CP1L-L □ □ D □- □

Omron CP1L-M □ □ D □ - □

Omron CP1E-E □ □ D □ - □

Omron CP1E-NA □ □ D □ - □

Omron Sysmac Cj2h-cpu64 Firmware

Omron Sysmac Cj2h-cpu64

Omron Sysmac Cj2h-cpu64-eip Firmware

Omron Sysmac Cj2h-cpu64-eip

Omron Sysmac Cj2h-cpu65 Firmware

Omron Sysmac Cj2h-cpu65

Omron Sysmac Cj2h-cpu65-eip Firmware

Omron Sysmac Cj2h-cpu65-eip

Omron Sysmac Cj2h-cpu66 Firmware

Omron Sysmac Cj2h-cpu66

Omron Sysmac Cj2h-cpu66-eip Firmware

Omron Sysmac Cj2h-cpu66-eip

Omron Sysmac Cj2h-cpu67 Firmware

Omron Sysmac Cj2h-cpu67

Omron Sysmac Cj2h-cpu67-eip Firmware

Omron Sysmac Cj2h-cpu67-eip

Omron Sysmac Cj2h-cpu68 Firmware

Omron Sysmac Cj2h-cpu68

Omron Sysmac Cj2h-cpu68-eip Firmware

Omron Sysmac Cj2h-cpu68-eip

Omron Sysmac Cj2m-cpu11 Firmware

Omron Sysmac Cj2m-cpu11

Omron Sysmac Cj2m-cpu12 Firmware

Omron Sysmac Cj2m-cpu12

Omron Sysmac Cj2m-cpu13 Firmware

Omron Sysmac Cj2m-cpu13

Omron Sysmac Cj2m-cpu14 Firmware

Omron Sysmac Cj2m-cpu14

Omron Sysmac Cj2m-cpu15 Firmware

Omron Sysmac Cj2m-cpu15

Omron Sysmac Cj2m-cpu31 Firmware

Omron Sysmac Cj2m-cpu31

Omron Sysmac Cj2m-cpu32 Firmware

Omron Sysmac Cj2m-cpu32

Omron Sysmac Cj2m-cpu33 Firmware

Omron Sysmac Cj2m-cpu33

Omron Sysmac Cj2m-cpu34 Firmware

Omron Sysmac Cj2m-cpu34

Omron Sysmac Cj2m-cpu35 Firmware

Omron Sysmac Cj2m-cpu35

Omron Sysmac Cp1e-e10dr-a Firmware

Omron Sysmac Cp1e-e10dr-a

Omron Sysmac Cp1e-e10dr-d Firmware

Omron Sysmac Cp1e-e10dr-d

Omron Sysmac Cp1e-e10dt-a Firmware

Omron Sysmac Cp1e-e10dt-a

Omron Sysmac Cp1e-e10dt-d Firmware

Omron Sysmac Cp1e-e10dt-d

Omron Sysmac Cp1e-e10dt1-a Firmware

Omron Sysmac Cp1e-e10dt1-a

Omron Sysmac Cp1e-e10dt1-d Firmware

Omron Sysmac Cp1e-e10dt1-d

Omron Sysmac Cp1e-e14dr-a Firmware

Omron Sysmac Cp1e-e14dr-a

Omron Sysmac Cp1e-e14sdr-a Firmware

Omron Sysmac Cp1e-e14sdr-a

Omron Sysmac Cp1e-e20dr-a Firmware

Omron Sysmac Cp1e-e20dr-a

Omron Sysmac Cp1e-e20sdr-a Firmware

Omron Sysmac Cp1e-e20sdr-a

Omron Sysmac Cp1e-e30dr-a Firmware

Omron Sysmac Cp1e-e30dr-a

Omron Sysmac Cp1e-e30sdr-a Firmware

Omron Sysmac Cp1e-e30sdr-a

Omron Sysmac Cp1e-e40dr-a Firmware

Omron Sysmac Cp1e-e40dr-a

Omron Sysmac Cp1e-e40sdr-a Firmware

Omron Sysmac Cp1e-e40sdr-a

Omron Sysmac Cp1e-e60sdr-a Firmware

Omron Sysmac Cp1e-e60sdr-a

Omron Sysmac Cp1e-na20dr-a Firmware

Omron Sysmac Cp1e-na20dr-a

Omron Sysmac Cp1e-na20dt-d Firmware

Omron Sysmac Cp1e-na20dt-d

Omron Sysmac Cp1e-na20dt1-d Firmware

Omron Sysmac Cp1e-na20dt1-d

Omron Sysmac Cp1h-x40dr-a Firmware

Omron Sysmac Cp1h-x40dr-a

Omron Sysmac Cp1h-x40dt-d Firmware

Omron Sysmac Cp1h-x40dt-d

Omron Sysmac Cp1h-x40dt1-d Firmware

Omron Sysmac Cp1h-x40dt1-d

Omron Sysmac Cp1h-xa40dr-a Firmware

Omron Sysmac Cp1h-xa40dr-a

Omron Sysmac Cp1h-xa40dt-d Firmware

Omron Sysmac Cp1h-xa40dt-d

Omron Sysmac Cp1h-xa40dt1-d Firmware

Omron Sysmac Cp1h-xa40dt1-d

Omron Sysmac Cp1h-y20dt-d Firmware

Omron Sysmac Cp1h-y20dt-d

Omron Sysmac Cp1l-el20dr-d Firmware

Omron Sysmac Cp1l-el20dr-d

Omron Sysmac Cp1l-em30dr-d Firmware

Omron Sysmac Cp1l-em30dr-d

Omron Sysmac Cp1l-em30dt-d Firmware

Omron Sysmac Cp1l-em30dt-d

Omron Sysmac Cp1l-em30dt1-d Firmware

Omron Sysmac Cp1l-em30dt1-d

Omron Sysmac Cp1l-em40dr-d Firmware

Omron Sysmac Cp1l-em40dr-d

Omron Sysmac Cp1l-em40dt-d Firmware

Omron Sysmac Cp1l-em40dt-d

Omron Sysmac Cp1l-em40dt1-d Firmware

Omron Sysmac Cp1l-em40dt1-d

Omron Sysmac Cp1l-l10dr-a Firmware

Omron Sysmac Cp1l-l10dr-a

Omron Sysmac Cp1l-l10dr-d Firmware

Omron Sysmac Cp1l-l10dr-d

Omron Sysmac Cp1l-l10dt-a Firmware

Omron Sysmac Cp1l-l10dt-a

Omron Sysmac Cp1l-l10dt-d Firmware

Omron Sysmac Cp1l-l10dt-d

Omron Sysmac Cp1l-l10dt1-d Firmware

Omron Sysmac Cp1l-l10dt1-d

Omron Sysmac Cp1l-l14dr-a Firmware

Omron Sysmac Cp1l-l14dr-a

Omron Sysmac Cp1l-l14dr-d Firmware

Omron Sysmac Cp1l-l14dr-d

Omron Sysmac Cp1l-l14dt-a Firmware

Omron Sysmac Cp1l-l14dt-a

Omron Sysmac Cp1l-l14dt-d Firmware

Omron Sysmac Cp1l-l14dt-d

Omron Sysmac Cp1l-l14dt1-d Firmware

Omron Sysmac Cp1l-l14dt1-d

Omron Sysmac Cp1l-l20dr-a Firmware

Omron Sysmac Cp1l-l20dr-a

Omron Sysmac Cp1l-l20dr-d Firmware

Omron Sysmac Cp1l-l20dr-d

Omron Sysmac Cp1l-l20dt-a Firmware

Omron Sysmac Cp1l-l20dt-a

Omron Sysmac Cp1l-l20dt-d Firmware

Omron Sysmac Cp1l-l20dt-d

Omron Sysmac Cp1l-l20dt1-d Firmware

Omron Sysmac Cp1l-l20dt1-d

Omron Sysmac Cp1l-m30dr-a Firmware

Omron Sysmac Cp1l-m30dr-a

Omron Sysmac Cp1l-m30dr-d Firmware

Omron Sysmac Cp1l-m30dr-d

Omron Sysmac Cp1l-m30dt-a Firmware

Omron Sysmac Cp1l-m30dt-a

Omron Sysmac Cp1l-m30dt-d Firmware

Omron Sysmac Cp1l-m30dt-d

Omron Sysmac Cp1l-m30dt1-d Firmware

Omron Sysmac Cp1l-m30dt1-d

Omron Sysmac Cp1l-m40dr-a Firmware

Omron Sysmac Cp1l-m40dr-a

Omron Sysmac Cp1l-m40dr-d Firmware

Omron Sysmac Cp1l-m40dr-d

Omron Sysmac Cp1l-m40dt-a Firmware

Omron Sysmac Cp1l-m40dt-a

Omron Sysmac Cp1l-m40dt-d Firmware

Omron Sysmac Cp1l-m40dt-d

Omron Sysmac Cp1l-m40dt1-d Firmware

Omron Sysmac Cp1l-m40dt1-d

Omron Sysmac Cp1l-m60dr-a Firmware

Omron Sysmac Cp1l-m60dr-a

Omron Sysmac Cp1l-m60dr-d Firmware

Omron Sysmac Cp1l-m60dr-d

Omron Sysmac Cp1l-m60dt-a Firmware

Omron Sysmac Cp1l-m60dt-a

Omron Sysmac Cp1l-m60dt-d Firmware

Omron Sysmac Cp1l-m60dt-d

Omron Sysmac Cp1l-m60dt1-d Firmware

Omron Sysmac Cp1l-m60dt1-d

Omron Sysmac Cp2e-e14dr-a Firmware

Omron Sysmac Cp2e-e14dr-a

Omron Sysmac Cp2e-e20dr-a Firmware

Omron Sysmac Cp2e-e20dr-a

Omron Sysmac Cp2e-e30dr-a Firmware

Omron Sysmac Cp2e-e30dr-a

Omron Sysmac Cp2e-e40dr-a Firmware

Omron Sysmac Cp2e-e40dr-a

Omron Sysmac Cp2e-e60dr-a Firmware

Omron Sysmac Cp2e-e60dr-a

Omron Sysmac Cp2e-n14dr-a Firmware

Omron Sysmac Cp2e-n14dr-a

Omron Sysmac Cp2e-n14dr-d Firmware

Omron Sysmac Cp2e-n14dr-d

Omron Sysmac Cp2e-n14dt-a Firmware

Omron Sysmac Cp2e-n14dt-a

Omron Sysmac Cp2e-n14dt-d Firmware

Omron Sysmac Cp2e-n14dt-d

Omron Sysmac Cp2e-n14dt1-d Firmware

Omron Sysmac Cp2e-n14dt1-d

Omron Sysmac Cp2e-n20dr-a Firmware

Omron Sysmac Cp2e-n20dr-a

Omron Sysmac Cp2e-n20dr-d Firmware

Omron Sysmac Cp2e-n20dr-d

Omron Sysmac Cp2e-n20dt-a Firmware

Omron Sysmac Cp2e-n20dt-a

Omron Sysmac Cp2e-n20dt-d Firmware

Omron Sysmac Cp2e-n20dt-d

Omron Sysmac Cp2e-n20dt1-d Firmware

Omron Sysmac Cp2e-n20dt1-d

Omron Sysmac Cp2e-n30dr-a Firmware

Omron Sysmac Cp2e-n30dr-a

Omron Sysmac Cp2e-n30dr-d Firmware

Omron Sysmac Cp2e-n30dr-d

Omron Sysmac Cp2e-n30dt-a Firmware

Omron Sysmac Cp2e-n30dt-a

Omron Sysmac Cp2e-n30dt-d Firmware

Omron Sysmac Cp2e-n30dt-d

Omron Sysmac Cp2e-n30dt1-d Firmware

Omron Sysmac Cp2e-n30dt1-d

Omron Sysmac Cp2e-n40dr-a Firmware

Omron Sysmac Cp2e-n40dr-a

Omron Sysmac Cp2e-n40dr-d Firmware

Omron Sysmac Cp2e-n40dr-d

Omron Sysmac Cp2e-n40dt-a Firmware

Omron Sysmac Cp2e-n40dt-a

Omron Sysmac Cp2e-n40dt-d Firmware

Omron Sysmac Cp2e-n40dt-d

Omron Sysmac Cp2e-n40dt1-d Firmware

Omron Sysmac Cp2e-n40dt1-d

Omron Sysmac Cp2e-n60dr-a Firmware

Omron Sysmac Cp2e-n60dr-a

Omron Sysmac Cp2e-n60dr-d Firmware

Omron Sysmac Cp2e-n60dr-d

Omron Sysmac Cp2e-n60dt-a Firmware

Omron Sysmac Cp2e-n60dt-a

Omron Sysmac Cp2e-n60dt-d Firmware

Omron Sysmac Cp2e-n60dt-d

Omron Sysmac Cp2e-n60dt1-d Firmware

Omron Sysmac Cp2e-n60dt1-d

Omron Sysmac Cp2e-s30dr-a Firmware

Omron Sysmac Cp2e-s30dr-a

Omron Sysmac Cp2e-s30dt-d Firmware

Omron Sysmac Cp2e-s30dt-d

Omron Sysmac Cp2e-s30dt1-d Firmware

Omron Sysmac Cp2e-s30dt1-d

Omron Sysmac Cp2e-s40dr-a Firmware

Omron Sysmac Cp2e-s40dr-a

Omron Sysmac Cp2e-s40dt-d Firmware

Omron Sysmac Cp2e-s40dt-d

Omron Sysmac Cp2e-s40dt1-d Firmware

Omron Sysmac Cp2e-s40dt1-d

Omron Sysmac Cp2e-s60dr-a Firmware

Omron Sysmac Cp2e-s60dr-a

Omron Sysmac Cp2e-s60dt-d Firmware

Omron Sysmac Cp2e-s60dt-d

Omron Sysmac Cp2e-s60dt1-d Firmware

Omron Sysmac Cp2e-s60dt1-d

Omron Sysmac Cs1w-drm21-v1 Firmware

Omron Sysmac Cs1w-drm21-v1

Omron Sysmac Cs1w-eip21 Firmware

Omron Sysmac Cs1w-eip21

Omron Sysmac Cs1w-etn21 Firmware

Omron Sysmac Cs1w-etn21

Omron Sysmac Cs1w-fln22 Firmware

Omron Sysmac Cs1w-fln22

Omron Sysmac Cs1w-nc\[\]71 Firmware

Omron Sysmac Cs1w-nc\[\]71

Omron Sysmac Cs1w-spu01-v2 Firmware

Omron Sysmac Cs1w-spu01-v2

Omron Sysmac Cs1w-spu02-v2 Firmware

Omron Sysmac Cs1w-spu02-v2

Event History

Mar 16, 2023

CVE Published

via MITRE·05:41 PM

Data Sourced

via MITRE·05:41 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-073-01

Frequently Asked Questions

What is the severity of CVE-2023-0811?

The severity of CVE-2023-0811 is rated as high due to improper access controls allowing potential unauthorized modification of sensitive security information.

How do I fix CVE-2023-0811?

To fix CVE-2023-0811, update the Omron Sysmac CJ1M unit firmware to a version greater than v4.0 that addresses these access control issues.

What systems are affected by CVE-2023-0811?

CVE-2023-0811 affects Omron CJ1M units with firmware version v4.0 and prior, specifically those using PROGRAM AREA WRITE commands.

What are the potential impacts of exploiting CVE-2023-0811?

Exploiting CVE-2023-0811 could allow attackers to overwrite security passwords, potentially disabling security protections and allowing unauthorized access.

How can I confirm if my system is vulnerable to CVE-2023-0811?

You can confirm if your system is vulnerable to CVE-2023-0811 by checking the firmware version of your Omron CJ1M unit against the disclosed vulnerable versions.