CVSS 3.1
9.1 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:HCVE-2023-0811
Critical (9.1) in omron. EPSS 0.6% chance of exploitation in the next 30 days.
Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
- CWE
- CWE-284
- Published
- Modified
- Record from
- the NVD, synced
Affected
- omron:sysmac_cj2h-cpu64-eip_firmware
- omron:sysmac_cj2h-cpu64_firmware
- omron:sysmac_cj2h-cpu65-eip_firmware
- omron:sysmac_cj2h-cpu65_firmware
- omron:sysmac_cj2h-cpu66-eip_firmware
- omron:sysmac_cj2h-cpu66_firmware
- omron:sysmac_cj2h-cpu67-eip_firmware
- omron:sysmac_cj2h-cpu67_firmware
- omron:sysmac_cj2h-cpu68-eip_firmware
- omron:sysmac_cj2h-cpu68_firmware
- omron:sysmac_cj2m-cpu11_firmware
- omron:sysmac_cj2m-cpu12_firmware
- omron:sysmac_cj2m-cpu13_firmware
- omron:sysmac_cj2m-cpu14_firmware
- omron:sysmac_cj2m-cpu15_firmware
- omron:sysmac_cj2m-cpu31_firmware
- omron:sysmac_cj2m-cpu32_firmware
- omron:sysmac_cj2m-cpu33_firmware
- omron:sysmac_cj2m-cpu34_firmware
- omron:sysmac_cj2m-cpu35_firmware
- omron:sysmac_cp1e-e10dr-a_firmware
- omron:sysmac_cp1e-e10dr-d_firmware
- omron:sysmac_cp1e-e10dt-a_firmware
- omron:sysmac_cp1e-e10dt-d_firmware
- omron:sysmac_cp1e-e10dt1-a_firmware
- omron:sysmac_cp1e-e10dt1-d_firmware
- omron:sysmac_cp1e-e14dr-a_firmware
- omron:sysmac_cp1e-e14sdr-a_firmware
- omron:sysmac_cp1e-e20dr-a_firmware
- omron:sysmac_cp1e-e20sdr-a_firmware
- omron:sysmac_cp1e-e30dr-a_firmware
- omron:sysmac_cp1e-e30sdr-a_firmware
- omron:sysmac_cp1e-e40dr-a_firmware
- omron:sysmac_cp1e-e40sdr-a_firmware
- omron:sysmac_cp1e-e60sdr-a_firmware
- omron:sysmac_cp1e-na20dr-a_firmware
- omron:sysmac_cp1e-na20dt-d_firmware
- omron:sysmac_cp1e-na20dt1-d_firmware
- omron:sysmac_cp1h-x40dr-a_firmware
- omron:sysmac_cp1h-x40dt-d_firmware
- omron:sysmac_cp1h-x40dt1-d_firmware
- omron:sysmac_cp1h-xa40dr-a_firmware
- omron:sysmac_cp1h-xa40dt-d_firmware
- omron:sysmac_cp1h-xa40dt1-d_firmware
- omron:sysmac_cp1h-y20dt-d_firmware
- omron:sysmac_cp1l-el20dr-d_firmware
- omron:sysmac_cp1l-em30dr-d_firmware
- omron:sysmac_cp1l-em30dt-d_firmware
- omron:sysmac_cp1l-em30dt1-d_firmware
- omron:sysmac_cp1l-em40dr-d_firmware