by Kastro CVE-2022-45790
Omron CJ-series and CS-series CPU modules — Omron FINS memory protection susceptible to bruteforce
Description · from the CVE record
The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected memory. This access can allow overwrite of values including programmed logic.
Affected
ProductAffectedFixed inSource
CJ-series and CS-series CPU modulesCJ2H 0.0 – < 1.51.5CNA
CJ-series and CS-series CPU modulesCJ2M 0.0 – < 2.12.1CNA
CJ-series and CS-series CPU modulesCJ1G 0.0 – < 4.14.1CNA
CJ-series and CS-series CPU modulesCS1H 0.0 – < 4.14.1CNA
CJ-series and CS-series CPU modulesCS1G 0.0 – < 4.14.1CNA
CJ-series and CS-series CPU modulesCS1D-H 0.0 – < 1.41.4CNA
CJ-series and CS-series CPU modulesCP1E-E 0.0 – < 1.31.3CNA
CJ-series and CS-series CPU modulesCP1E-N 0.0 – < 1.31.3CNA
CJ-series and CS-series CPU modulesCS1D-P 0.0 – < 1.41.4CNA
Scores by source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Dragos (CNA)8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial