omron vulnerabilities
Recent CVEs affecting omron products. 4 tracked.
omron has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-01-22. Highest priority: CVE-2022-45790 (score 50/100).
- CVE-2022-45794 HIGH 8.6 MITIGATE MITIGATE An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a net
- CVE-2022-45793 MEDIUM 5.5 UPGRADE Sysmac Studio installs executables in a directory with poor permissions
- CVE-2022-45792 HIGH 7.8 UPGRADE Project files may contain malicious contents which the software will use to create files on the filesystem
- CVE-2022-45790 HIGH 8.6 UPGRADE UPGRADE The Omron FINS protocol has an authenticated feature to prevent access to memory regions
FAQ
How do I fix omron vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is omron being exploited right now?
None of the tracked omron CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which omron CVE should I patch first?
CVE-2022-45790 currently ranks highest (50/100): The Omron FINS protocol has an authenticated feature to prevent access to memory regions.
Products
- automation software sysmac studio
- cj1g-cpu42p firmware
- cj1g-cpu43p firmware
- cj1g-cpu44p firmware
- cj1g-cpu45p firmware
- cj1g-cpu45p-gtc firmware
- cp1e-e firmware
- sysmac cj2h-cpu64 firmware
- sysmac cj2h-cpu64-eip firmware
- sysmac cj2h-cpu65 firmware
- sysmac cj2h-cpu65-eip firmware
- sysmac cj2h-cpu66 firmware
- sysmac cj2h-cpu66-eip firmware
- sysmac studio