Denial-of-Service Vulnerability in CJ Series and CS/CJ Series EtherNet/IP Units by Omron

CVE-2023-38744

What is CVE-2023-38744?

A denial-of-service vulnerability exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication functions of the CS/CJ Series EtherNet/IP units. This vulnerability allows a remote unauthenticated attacker to send specially crafted packets to the affected units, potentially causing them to become unresponsive and disrupt network operations. The affected products include the CJ2M CPU Unit with version 2.18 and earlier, the CJ2H CPU Unit with version 3.04 and earlier, and the CS/CJ Series EtherNet/IP units including CS1W-EIP21 and CJ1W-EIP21, both with version 3.04 and earlier. Organizations using these products should implement necessary measures to mitigate potential risks.

References