VULNERABILITY INTELLIGENCE

CVE-2023-0811

CVSS score9.1 CRITICAL

EPSS probability0.62%

CISA KEVNot currently listed

Published2023-03-16

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Description

Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.

Weakness classification

ics-cert@hq.dhs.gov: CWE-284

Primary references

ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
ics-cert@hq.dhs.gov — Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory