{"cve":"CVE-2023-0811","nvd":{"published":"2023-03-16T18:15:11.160","modified":"2026-06-17T05:26:21.667","status":"Modified","description":"Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","score":9.1},"cwes":["CWE-284"],"references":["https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-01","https://www.ia.omron.com/product/vulnerability/OMSR-2023-001_en.pdf","https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-01","https://www.ia.omron.com/product/vulnerability/OMSR-2023-001_en.pdf"],"products":["omron:sysmac_cj2h-cpu64-eip_firmware","omron:sysmac_cj2h-cpu64_firmware","omron:sysmac_cj2h-cpu65-eip_firmware","omron:sysmac_cj2h-cpu65_firmware","omron:sysmac_cj2h-cpu66-eip_firmware","omron:sysmac_cj2h-cpu66_firmware","omron:sysmac_cj2h-cpu67-eip_firmware","omron:sysmac_cj2h-cpu67_firmware","omron:sysmac_cj2h-cpu68-eip_firmware","omron:sysmac_cj2h-cpu68_firmware","omron:sysmac_cj2m-cpu11_firmware","omron:sysmac_cj2m-cpu12_firmware","omron:sysmac_cj2m-cpu13_firmware","omron:sysmac_cj2m-cpu14_firmware","omron:sysmac_cj2m-cpu15_firmware","omron:sysmac_cj2m-cpu31_firmware","omron:sysmac_cj2m-cpu32_firmware","omron:sysmac_cj2m-cpu33_firmware","omron:sysmac_cj2m-cpu34_firmware","omron:sysmac_cj2m-cpu35_firmware","omron:sysmac_cp1e-e10dr-a_firmware","omron:sysmac_cp1e-e10dr-d_firmware","omron:sysmac_cp1e-e10dt-a_firmware","omron:sysmac_cp1e-e10dt-d_firmware","omron:sysmac_cp1e-e10dt1-a_firmware","omron:sysmac_cp1e-e10dt1-d_firmware","omron:sysmac_cp1e-e14dr-a_firmware","omron:sysmac_cp1e-e14sdr-a_firmware","omron:sysmac_cp1e-e20dr-a_firmware","omron:sysmac_cp1e-e20sdr-a_firmware","omron:sysmac_cp1e-e30dr-a_firmware","omron:sysmac_cp1e-e30sdr-a_firmware","omron:sysmac_cp1e-e40dr-a_firmware","omron:sysmac_cp1e-e40sdr-a_firmware","omron:sysmac_cp1e-e60sdr-a_firmware","omron:sysmac_cp1e-na20dr-a_firmware","omron:sysmac_cp1e-na20dt-d_firmware","omron:sysmac_cp1e-na20dt1-d_firmware","omron:sysmac_cp1h-x40dr-a_firmware","omron:sysmac_cp1h-x40dt-d_firmware","omron:sysmac_cp1h-x40dt1-d_firmware","omron:sysmac_cp1h-xa40dr-a_firmware","omron:sysmac_cp1h-xa40dt-d_firmware","omron:sysmac_cp1h-xa40dt1-d_firmware","omron:sysmac_cp1h-y20dt-d_firmware","omron:sysmac_cp1l-el20dr-d_firmware","omron:sysmac_cp1l-em30dr-d_firmware","omron:sysmac_cp1l-em30dt-d_firmware","omron:sysmac_cp1l-em30dt1-d_firmware","omron:sysmac_cp1l-em40dr-d_firmware"],"source":"nvd","synced_at":"2026-10-19T21:37:41.955480748+00:00"},"epss":{"cve":"CVE-2023-0811","score":0.00621,"percentile":0.49775,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}