QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2022-45790

Back to search

CVE-2022-45790

Published: Jan 22, 2024

Modified: Nov 13, 2024

PUBLISHED

CVSS v3.1

8.6

HIGH

Description

The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected memory. This access can allow overwrite of values including programmed logic.

VendorProductVersions

Omron

CJ-series and CS-series CPU modules

affected
CJ2H 0.0 - < 1.5
affected
CJ2M 0.0 - < 2.1
affected
CJ1G 0.0 - < 4.1
affected
CS1H 0.0 - < 4.1
affected
CS1G 0.0 - < 4.1

+4 more versions

Weaknesses (CWE)

CWE-307

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

High

Availability

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now