CVE-2023-38744
First published: Thu Aug 03 2023(Updated: )
Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product receives a packet which is specially crafted by a remote unauthenticated attacker, the unit of the affected product may fall into a denial-of-service (DoS) condition. Affected products/versions are as follows: CJ2M CPU Unit CJ2M-CPU3[] Unit version of the built-in EtherNet/IP section Ver. 2.18 and earlier, CJ2H CPU Unit CJ2H-CPU6[]-EIP Unit version of the built-in EtherNet/IP section Ver. 3.04 and earlier, CS/CJ Series EtherNet/IP Unit CS1W-EIP21 V3.04 and earlier, and CS/CJ Series EtherNet/IP Unit CJ1W-EIP21 V3.04 and earlier.
Credit: vultures@jpcert.or.jp vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Omron Cj2m-cpu35 Firmware | <=2.18 | |
| Omron Cj2m-cpu35 | ||
| Omron Cj2m-cpu34 Firmware | <=2.18 | |
| Omron Cj2m-cpu34 | ||
| Omron Cj2m-cpu33 Firmware | <=2.18 | |
| Omron Cj2m-cpu33 | ||
| Omron Cj2m-cpu32 Firmware | <=2.18 | |
| Omron Cj2m-cpu32 | ||
| Omron Cj2m-cpu31 Firmware | <=2.18 | |
| Omron Cj2m-cpu31 | ||
| Omron Cj2h-cpu68-eip Firmware | <=3.04 | |
| Omron Cj2h-cpu68-eip | ||
| Omron Cj2h-cpu67-eip Firmware | <=3.04 | |
| Omron Cj2h-cpu67-eip | ||
| Omron Cj2h-cpu66-eip Firmware | <=3.04 | |
| Omron Cj2h-cpu66-eip | ||
| Omron Cj2h-cpu65-eip Firmware | <=3.04 | |
| Omron Cj2h-cpu65-eip | ||
| Omron Cj2h-cpu64-eip Firmware | <=3.04 | |
| Omron Cj2h-cpu64-eip | ||
| Omron Cs1w-eip21 Firmware | <=3.04 | |
| Omron Cs1w-eip21 | ||
| Omron Cj1w-eip21 Firmware | <=3.04 | |
| Omron Cj1w-eip21 | ||
| All of | ||
| Omron Cj2m-cpu35 | ||
| Omron Cj2m-cpu35 Firmware | <=2.18 | |
| All of | ||
| Omron Cj2m-cpu34 | ||
| Omron Cj2m-cpu34 Firmware | <=2.18 | |
| All of | ||
| Omron Cj2m-cpu33 | ||
| Omron Cj2m-cpu33 Firmware | <=2.18 | |
| All of | ||
| Omron Cj2m-cpu32 | ||
| Omron Cj2m-cpu32 Firmware | <=2.18 | |
| All of | ||
| Omron Cj2m-cpu31 | ||
| Omron Cj2m-cpu31 Firmware | <=2.18 | |
| All of | ||
| Omron Cj2h-cpu68-eip | ||
| Omron Cj2h-cpu68-eip Firmware | <=3.04 | |
| All of | ||
| Omron Cj2h-cpu67-eip | ||
| Omron Cj2h-cpu67-eip Firmware | <=3.04 | |
| All of | ||
| Omron Cj2h-cpu66-eip | ||
| Omron Cj2h-cpu66-eip Firmware | <=3.04 | |
| All of | ||
| Omron Cj2h-cpu65-eip Firmware | <=3.04 | |
| Omron Cj2h-cpu65-eip | ||
| All of | ||
| Omron Cj2h-cpu64-eip Firmware | <=3.04 | |
| Omron Cj2h-cpu64-eip | ||
| All of | ||
| Omron Cs1w-eip21 Firmware | <=3.04 | |
| Omron Cs1w-eip21 | ||
| All of | ||
| Omron Cj1w-eip21 Firmware | <=3.04 | |
| Omron Cj1w-eip21 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-38744.
What is the severity level of CVE-2023-38744?
The severity level of CVE-2023-38744 is high with a severity value of 7.5.
How does the vulnerability affect the affected products?
The vulnerability affects the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit.
How can the vulnerability be exploited?
The vulnerability can be exploited by sending a specifically crafted packet to the affected product.
Is there a fix available for CVE-2023-38744?
Yes, Omron has released firmware updates to address the vulnerability. Please refer to the product documentation or contact Omron for more information.
- collector/nvd-latest
- collector/nvd-index
- agent/references
- agent/author
- agent/type
- agent/severity
- agent/description
- agent/event
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/weakness
- agent/tags
- agent/softwarecombine
- vendor/omron
- canonical/omron cj2m-cpu35 firmware
- version/omron cj2m-cpu35 firmware/2.18
- canonical/omron cj2m-cpu35
- canonical/omron cj2m-cpu34 firmware
- version/omron cj2m-cpu34 firmware/2.18
- canonical/omron cj2m-cpu34
- canonical/omron cj2m-cpu33 firmware
- version/omron cj2m-cpu33 firmware/2.18
- canonical/omron cj2m-cpu33
- canonical/omron cj2m-cpu32 firmware
- version/omron cj2m-cpu32 firmware/2.18
- canonical/omron cj2m-cpu32
- canonical/omron cj2m-cpu31 firmware
- version/omron cj2m-cpu31 firmware/2.18
- canonical/omron cj2m-cpu31
- canonical/omron cj2h-cpu68-eip firmware
- version/omron cj2h-cpu68-eip firmware/3.04
- canonical/omron cj2h-cpu68-eip
- canonical/omron cj2h-cpu67-eip firmware
- version/omron cj2h-cpu67-eip firmware/3.04
- canonical/omron cj2h-cpu67-eip
- canonical/omron cj2h-cpu66-eip firmware
- version/omron cj2h-cpu66-eip firmware/3.04
- canonical/omron cj2h-cpu66-eip
- canonical/omron cj2h-cpu65-eip firmware
- version/omron cj2h-cpu65-eip firmware/3.04
- canonical/omron cj2h-cpu65-eip
- canonical/omron cj2h-cpu64-eip firmware
- version/omron cj2h-cpu64-eip firmware/3.04
- canonical/omron cj2h-cpu64-eip
- canonical/omron cs1w-eip21 firmware
- version/omron cs1w-eip21 firmware/3.04
- canonical/omron cs1w-eip21
- canonical/omron cj1w-eip21 firmware
- version/omron cj1w-eip21 firmware/3.04
- canonical/omron cj1w-eip21