Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2022-45790

Omron FINS memory protection susceptible to bruteforce

Description

The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected memory. This access can allow overwrite of values including programmed logic.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Omron CJ-series and CS-series CPU modules

Default version status: unaffected

  • CJ2H 0.0 to < 1.5affected
  • CJ2M 0.0 to < 2.1affected
  • CJ1G 0.0 to < 4.1affected
  • CS1H 0.0 to < 4.1affected
  • CS1G 0.0 to < 4.1affected
  • CS1D-H 0.0 to < 1.4affected
  • CP1E-E 0.0 to < 1.3affected
  • CP1E-N 0.0 to < 1.3affected
  • CS1D-P 0.0 to < 1.4affected

References