CVE-2022-45790
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
22/01/2024
Last modified:
29/01/2024
Description
The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected memory. This access can allow overwrite of values including programmed logic.
Impact
Base Score 3.x
9.10
Severity 3.x
CRITICAL
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:omron:cj1g-cpu45p_firmware:*:*:*:*:*:*:*:* | 4.1 (excluding) | |
| cpe:2.3:h:omron:cj1g-cpu45p:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:omron:cj1g-cpu45p-gtc_firmware:*:*:*:*:*:*:*:* | 4.1 (excluding) | |
| cpe:2.3:h:omron:cj1g-cpu45p-gtc:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:omron:cj1g-cpu44p_firmware:*:*:*:*:*:*:*:* | 4.1 (excluding) | |
| cpe:2.3:h:omron:cj1g-cpu44p:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:omron:cj1g-cpu43p_firmware:*:*:*:*:*:*:*:* | 4.1 (excluding) | |
| cpe:2.3:h:omron:cj1g-cpu43p:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:omron:cj1g-cpu42p_firmware:*:*:*:*:*:*:*:* | 4.1 (excluding) | |
| cpe:2.3:h:omron:cj1g-cpu42p:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:omron:cp1e-e_firmware:*:*:*:*:*:*:*:* | 1.3 (excluding) | |
| cpe:2.3:h:omron:cp1e-e:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:omron:cp1e-n_firmware:*:*:*:*:*:*:*:* | 1.3 (excluding) | |
| cpe:2.3:h:omron:cp1e-n:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:omron:cj2h-cpu68_firmware:*:*:*:*:*:*:*:* | 1.5 (excluding) |
To consult the complete list of CPE names with products and versions, see this page