CVE-2023-38744
First published: Thu Aug 03 2023(Updated: )
Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product receives a packet which is specially crafted by a remote unauthenticated attacker, the unit of the affected product may fall into a denial-of-service (DoS) condition. Affected products/versions are as follows: CJ2M CPU Unit CJ2M-CPU3[] Unit version of the built-in EtherNet/IP section Ver. 2.18 and earlier, CJ2H CPU Unit CJ2H-CPU6[]-EIP Unit version of the built-in EtherNet/IP section Ver. 3.04 and earlier, CS/CJ Series EtherNet/IP Unit CS1W-EIP21 V3.04 and earlier, and CS/CJ Series EtherNet/IP Unit CJ1W-EIP21 V3.04 and earlier.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Omron Sysmac CJ2M-CPU35 Firmware | <=2.18 | |
| Omron CJ2M-CPU35 Firmware | ||
| Omron Sysmac CJ2M-CPU34 Firmware | <=2.18 | |
| Omron CJ2 | ||
| Omron Sysmac CJ2M-CPU33 Firmware | <=2.18 | |
| Omron CJ2M-CPU33 Firmware | ||
| Omron CJ2M-CPU Firmware | <=2.18 | |
| Omron CJ2M-CPU32 Firmware | ||
| Omron Sysmac CJ2M-CPU31 Firmware | <=2.18 | |
| Omron CJ2 | ||
| Omron Sysmac CJ2H-CPU68-EIP Firmware | <=3.04 | |
| Omron Sysmac CJ2H-CPU68-EIP | ||
| Omron Sysmac CJ2H-CPU67-EIP Firmware | <=3.04 | |
| Omron Sysmac CJ2H-CPU67-EIP | ||
| Omron CJ2H-CPU66-EIP | <=3.04 | |
| Omron Sysmac CJ2H-CPU66-EIP | ||
| Omron CJ2H-CPU65-EIP | <=3.04 | |
| Omron Sysmac CJ2H-CPU65-EIP | ||
| Omron Sysmac CJ2H-CPU64-EIP Firmware | <=3.04 | |
| Omron CJ2H-CPU64 | ||
| Omron CS1W-ETN21 | <=3.04 | |
| Omron Sysmac CS1W-EIP21 | ||
| Omron CJ1W-EIP21 | <=3.04 | |
| Omron CJ1 | ||
| All of | ||
| Omron CJ2M-CPU35 Firmware | ||
| Omron Sysmac CJ2M-CPU35 Firmware | <=2.18 | |
| All of | ||
| Omron CJ2 | ||
| Omron Sysmac CJ2M-CPU34 Firmware | <=2.18 | |
| All of | ||
| Omron CJ2M-CPU33 Firmware | ||
| Omron Sysmac CJ2M-CPU33 Firmware | <=2.18 | |
| All of | ||
| Omron CJ2M-CPU32 Firmware | ||
| Omron CJ2M-CPU Firmware | <=2.18 | |
| All of | ||
| Omron CJ2 | ||
| Omron Sysmac CJ2M-CPU31 Firmware | <=2.18 | |
| All of | ||
| Omron Sysmac CJ2H-CPU68-EIP | ||
| Omron Sysmac CJ2H-CPU68-EIP Firmware | <=3.04 | |
| All of | ||
| Omron Sysmac CJ2H-CPU67-EIP | ||
| Omron Sysmac CJ2H-CPU67-EIP Firmware | <=3.04 | |
| All of | ||
| Omron Sysmac CJ2H-CPU66-EIP | ||
| Omron CJ2H-CPU66-EIP | <=3.04 | |
| All of | ||
| Omron CJ2H-CPU65-EIP | <=3.04 | |
| Omron Sysmac CJ2H-CPU65-EIP | ||
| All of | ||
| Omron Sysmac CJ2H-CPU64-EIP Firmware | <=3.04 | |
| Omron CJ2H-CPU64 | ||
| All of | ||
| Omron CS1W-ETN21 | <=3.04 | |
| Omron Sysmac CS1W-EIP21 | ||
| All of | ||
| Omron CJ1W-EIP21 | <=3.04 | |
| Omron CJ1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-38744.
What is the severity level of CVE-2023-38744?
The severity level of CVE-2023-38744 is high with a severity value of 7.5.
How does the vulnerability affect the affected products?
The vulnerability affects the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit.
How can the vulnerability be exploited?
The vulnerability can be exploited by sending a specifically crafted packet to the affected product.
Is there a fix available for CVE-2023-38744?
Yes, Omron has released firmware updates to address the vulnerability. Please refer to the product documentation or contact Omron for more information.
- collector/nvd-latest
- agent/references
- agent/type
- agent/severity
- agent/description
- agent/event
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/source
- agent/author
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/softwarecombine
- vendor/omron
- canonical/omron sysmac cj2m-cpu35 firmware
- version/omron sysmac cj2m-cpu35 firmware/2.18
- canonical/omron cj2m-cpu35 firmware
- canonical/omron sysmac cj2m-cpu34 firmware
- version/omron sysmac cj2m-cpu34 firmware/2.18
- canonical/omron cj2
- canonical/omron sysmac cj2m-cpu33 firmware
- version/omron sysmac cj2m-cpu33 firmware/2.18
- canonical/omron cj2m-cpu33 firmware
- canonical/omron cj2m-cpu firmware
- version/omron cj2m-cpu firmware/2.18
- canonical/omron cj2m-cpu32 firmware
- canonical/omron sysmac cj2m-cpu31 firmware
- version/omron sysmac cj2m-cpu31 firmware/2.18
- canonical/omron sysmac cj2h-cpu68-eip firmware
- version/omron sysmac cj2h-cpu68-eip firmware/3.04
- canonical/omron sysmac cj2h-cpu68-eip
- canonical/omron sysmac cj2h-cpu67-eip firmware
- version/omron sysmac cj2h-cpu67-eip firmware/3.04
- canonical/omron sysmac cj2h-cpu67-eip
- canonical/omron cj2h-cpu66-eip
- version/omron cj2h-cpu66-eip/3.04
- canonical/omron sysmac cj2h-cpu66-eip
- canonical/omron cj2h-cpu65-eip
- version/omron cj2h-cpu65-eip/3.04
- canonical/omron sysmac cj2h-cpu65-eip
- canonical/omron sysmac cj2h-cpu64-eip firmware
- version/omron sysmac cj2h-cpu64-eip firmware/3.04
- canonical/omron cj2h-cpu64
- canonical/omron cs1w-etn21
- version/omron cs1w-etn21/3.04
- canonical/omron sysmac cs1w-eip21
- canonical/omron cj1w-eip21
- version/omron cj1w-eip21/3.04
- canonical/omron cj1