CVE-2023-22357

9.8 criticalEPSS 1.2%

Critical (9.8) in omron cp1l-el20dr-d firmware. EPSS 1.2% chance of exploitation in the next 30 days.

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the firmware, causing a denial-of-service (DoS) condition, and/or arbitrary code execution.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-489
Published: 2023-01-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

omron:cp1l-el20dr-d_firmware

References

https://jvn.jp/en/vu/JVNVU97575890/index.html
https://jvn.jp/en/vu/JVNVU97575890/index.html

Check your stack JSON