CVE-2023-0811

criticalPriorität · verfolgen · 36EPSS 0.006 · 50. PerzentilEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.62% (50th) EPSS

CVSS 9.1 · critical

Is it mine?

180 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-28

Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenCJ1G-CPU □ □ Pcisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCJ2H-CPU6 □cisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCJ2H-CPU6 □ -EIPcisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCJ2M-CPU □ □cisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCP1E-E □ □ D □ - □cisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCP1E-NA □ □ D □ - □cisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCP1H-X40D □ - □cisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCP1H-XA40D □ - □cisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCP1H-Y20DT-Dcisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCP1L-EL20D □ - □cisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCP1L-EM □ □ D □ - □cisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCP1L-L □ □ D □- □cisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCP1L-M □ □ D □ - □cisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCP2E-E □ □ D □ - □cisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCP2E-N □ □ D □ - □cisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCP2E-S □ □ D □- □cisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCS1D-CPU □ □ Hcisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCS1D-CPU □ □ HAcisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCS1D-CPU □ □ Pcisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCS1D-CPU □ □ Scisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCS1D-CPU □ □ SAcisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCS1G-CPU □ □ Hcisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.
BehobenCS1H-CPU □ □ Hcisa_csaf_ot
Anti-virus protection: Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.1

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 8.3–9.1

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.2

v3.09.1criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Hsecondary · CISA US

v3.19.1criticalAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Hsecondary · ENISA EU

v3.19.1criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:Hsecondary · ics-cert@hq.dhs.gov USAusnutzbarkeit 3.9 · Auswirkung 5.2

v3.18.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-284USCWE-284USCWE-284US

betroffene Produkte (180)

Betroffene Produkte und Versionsbereiche.

CJ1G-CPU □ □ P: All versionsalle Versionencisa_csaf_otUS
CJ2H-CPU6 □ -EIP: All versionsalle Versionencisa_csaf_otUS
CJ2H-CPU6 □: All versionsalle Versionencisa_csaf_otUS
CJ2M-CPU □ □: All versionsalle Versionencisa_csaf_otUS
CP1E-E □ □ D □ - □: All versionsalle Versionencisa_csaf_otUS
CP1E-NA □ □ D □ - □: All versionsalle Versionencisa_csaf_otUS
CP1H-X40D □ - □: All versionsalle Versionencisa_csaf_otUS
CP1H-XA40D □ - □: All versionsalle Versionencisa_csaf_otUS
CP1H-Y20DT-D: All versionsalle Versionencisa_csaf_otUS
CP1L-EL20D □ - □: All versionsalle Versionencisa_csaf_otUS
CP1L-EM □ □ D □ - □: All versionsalle Versionencisa_csaf_otUS
CP1L-L □ □ D □- □: All versionsalle Versionencisa_csaf_otUS
CP1L-M □ □ D □ - □: All versionsalle Versionencisa_csaf_otUS
CP2E-E □ □ D □ - □: All versionsalle Versionencisa_csaf_otUS
CP2E-N □ □ D □ - □: All versionsalle Versionencisa_csaf_otUS
CP2E-S □ □ D □- □: All versionsalle Versionencisa_csaf_otUS
CS1D-CPU □ □ H: All versionsalle Versionencisa_csaf_otUS
CS1D-CPU □ □ HA: All versionsalle Versionencisa_csaf_otUS
CS1D-CPU □ □ P: All versionsalle Versionencisa_csaf_otUS
CS1D-CPU □ □ S: All versionsalle Versionencisa_csaf_otUS

20 von 180 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

ICSA-23-073-01Omron CJ1M PLC2023-03-31icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to bypass user memory protections by writing to a specific memory address. An attacker can also overwrite passwords and lock engineers from reading their own memory regions.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot NVD CVE.org MITRE

veröffentlicht 2023-03-16geändert 2026-06-17

Referenzen (9)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan