CRITICAL🇵🇱 Wersja polska

CVE-2023-27396

CVSS 9.8v3.1pub. 2023-06-19upd. 2024-12-24

FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues -- (1)Plaintext communication, and (2)No authentication required. When FINS messages are intercepted, the contents may be retrieved. When arbitrary FINS messages are injected, any commands may be executed on, or the system information may be retrieved from, the affected device. Affected products and versions are as follows: SYSMAC CS-series CPU Units, all versions, SYSMAC CJ-series CPU Units, all versions, SYSMAC CP-series CPU Units, all versions, SYSMAC NJ-series CPU Units, all versions, SYSMAC NX1P-series CPU Units, all versions, SYSMAC NX102-series CPU Units, all versions, and SYSMAC NX7 Database Connection CPU Units (Ver.1.16 or later)

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Omron Cj2h Cpu64

    HW
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu64 Eip

    HW
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu64 Eip Firmware

    OS
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu64 Firmware

    OS
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu65

    HW
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu65 Eip

    HW
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu65 Eip Firmware

    OS
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu65 Firmware

    OS
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu66

    HW
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu66 Eip

    HW
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu66 Eip Firmware

    OS
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu66 Firmware

    OS
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu67

    HW
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu67 Eip

    HW
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu67 Eip Firmware

    OS
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu67 Firmware

    OS
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu68

    HW
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu68 Eip

    HW
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu68 Eip Firmware

    OS
    Omron
    wszystkie wersje

  • Omron Cj2h Cpu68 Firmware

    OS
    Omron
    wszystkie wersje

  • Omron Cj2m Cpu11

    HW
    Omron
    wszystkie wersje

  • Omron Cj2m Cpu11 Firmware

    OS
    Omron
    wszystkie wersje

  • Omron Cj2m Cpu12

    HW
    Omron
    wszystkie wersje

  • Omron Cj2m Cpu12 Firmware

    OS
    Omron
    wszystkie wersje

  • Omron Cj2m Cpu13

    HW
    Omron
    wszystkie wersje

  • Omron Cj2m Cpu13 Firmware

    OS
    Omron
    wszystkie wersje

  • Omron Cj2m Cpu14

    HW
    Omron
    wszystkie wersje

  • Omron Cj2m Cpu14 Firmware

    OS
    Omron
    wszystkie wersje

  • Omron Cj2m Cpu15

    HW
    Omron
    wszystkie wersje

  • Omron Cj2m Cpu15 Firmware

    OS
    Omron
    wszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-45790HIGH8.6ten sam produkt

The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is su...

CVE-2023-38744HIGH7.5ten sam produkt

Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in th...

CVE-2023-0811CRITICAL9.1ten sam vendor

Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is sto...

CVE-2023-22357CRITICAL9.8ten sam vendor

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specifie...

CVE-2022-31207CRITICAL9.8ten sam vendor

The Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18 lack cryptogr...