Critical severity · published Jan 22, 2024
CVE-2022-45790
The Omron FINS protocol has an authenticated feature to prevent access to memory regions
9.1
CVSS
0.9%
EPSS
No
On KEV
Description
The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected memory. This access can allow overwrite of values including programmed logic.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Cj1g-cpu42p Firmware · Omron
before 4.1 · source: NVD
CF
Cj1g-cpu43p Firmware · Omron
before 4.1 · source: NVD
CF
Cj1g-cpu44p Firmware · Omron
before 4.1 · source: NVD
CF
Cj1g-cpu45p Firmware · Omron
before 4.1 · source: NVD
CF
Cj1g-cpu45p-gtc Firmware · Omron
before 4.1 · source: NVD
CF
Cj2h-cpu64 Firmware · Omron
before 1.5 · source: NVD
CF
Cj2h-cpu64-eip Firmware · Omron
before 1.5 · source: NVD
CF
Cj2h-cpu65 Firmware · Omron
before 1.5 · source: NVD
CF
Cj2h-cpu65-eip Firmware · Omron
before 1.5 · source: NVD
CF
Cj2h-cpu66 Firmware · Omron
before 1.5 · source: NVD
CF
Cj2h-cpu66-eip Firmware · Omron
before 1.5 · source: NVD
CF
Cj2h-cpu67 Firmware · Omron
before 1.5 · source: NVD