Description
The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected memory. This access can allow overwrite of values including programmed logic.
Metrics
CVSS 3.1 9.1/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Omron | CJ-series and CS-series CPU modules | >= CJ2H 0.0, < 1.5; >= CJ2M 0.0, < 2.1; >= CJ1G 0.0, < 4.1; >= CS1H 0.0, < 4.1; >= CS1G 0.0, < 4.1; >= CS1D-H 0.0, < 1.4; >= CP1E-E 0.0, < 1.3; >= CP1E-N 0.0, < 1.3; >= CS1D-P 0.0, < 1.4 |
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-262-05Third Party Advisory, US Government Resource
- https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/Third Party Advisory
- https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-010_en.pdfVendor Advisory
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-262-05Third Party Advisory, US Government Resource
- https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/Third Party Advisory
- https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-010_en.pdfVendor Advisory
Timeline
- Published
- Jan 22, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Modified