Access Control Flaw in Omron CJ1M Unit Affects User Program Security
CVE-2023-0811

9.1CRITICAL

Key Information:

Vendor

Omron

Status
Cj1m Sysmac Cj-series
Cj1m Sysmac Cs-series
Cj1m Sysmac Cp-series
Vendor
CVE Published:
16 March 2023

What is CVE-2023-0811?

The Omron CJ1M unit up to version 4.0 is affected by an improper access control vulnerability on the memory region that stores the User Management (UM) password. An attacker can execute a PROGRAM AREA WRITE command targeting this memory segment, enabling them to overwrite the UM password. This exploitation may lead to the disabling of critical UM protections or the input of non-ASCII passwords, hindering legitimate engineers from accessing or modifying the user program.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

CJ1M SYSMAC CJ-series All versions

CJ1M SYSMAC CJ-series All versions

CJ1M SYSMAC CJ-series All versions

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-0...
https://www.ia.omron.com/product/vulnerability/OMSR-2023-...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sam Hanson of Dragos reported these vulnerabilities to CISA.
JSON
.