CVE-2023-0811

Katalog CVE

CVSS 9.1 · Critical EPSS 0,62%

Kerentanan Improper Access Control pada omron sysmac cj2h-cpu64 firmware, omron sysmac cj2h-cpu64-eip firmware +58 lainnya. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.

Rincian

Terbit di NVD

16 Maret 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control

EPSS (30 hari)

0,62% peluang dieksploitasi; lebih tinggi dari 48,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 128 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

• https://www.ia.omron.com/product/vulnerability/OMSR-2023-001_en.pdf mitigasi · advisory vendor
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-01 advisory pihak ketiga · pemerintah AS