ICSA-23-073-01

icsaUScisa_csaf_ot

Omron CJ1M PLC

Advisory ansehen veröffentlicht 2023-03-31

Successful exploitation of these vulnerabilities could allow an attacker to bypass user memory protections by writing to a specific memory address. An attacker can also overwrite passwords and lock engineers from reading their own memory regions.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2023-0811UScritical9.1—
Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (23)

  • BehobenCJ1G-CPU □ □ P

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCJ2H-CPU6 □

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCJ2H-CPU6 □ -EIP

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCJ2M-CPU □ □

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCP1E-E □ □ D □ - □

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCP1E-NA □ □ D □ - □

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCP1H-X40D □ - □

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCP1H-XA40D □ - □

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCP1H-Y20DT-D

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCP1L-EL20D □ - □

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCP1L-EM □ □ D □ - □

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCP1L-L □ □ D □- □

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCP1L-M □ □ D □ - □

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCP2E-E □ □ D □ - □

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCP2E-N □ □ D □ - □

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCP2E-S □ □ D □- □

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCS1D-CPU □ □ H

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCS1D-CPU □ □ HA

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCS1D-CPU □ □ P

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCS1D-CPU □ □ S

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCS1D-CPU □ □ SA

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCS1G-CPU □ □ H

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

  • BehobenCS1H-CPU □ □ H

    Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan