CVE-2022-45790: Omron CJ1G-CPU42P Firmware

Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days.

The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected memory. This access can allow overwrite of values including programmed logic.

Affected products

• Omron CJ1G-CPU42P Firmware: before 4.1 (fixed in 4.1)
• Omron CJ1G-CPU43P Firmware: before 4.1 (fixed in 4.1)
• Omron CJ1G-CPU44P Firmware: before 4.1 (fixed in 4.1)
• Omron CJ1G-CPU45P-Gtc Firmware: before 4.1 (fixed in 4.1)
• Omron CJ1G-CPU45P Firmware: before 4.1 (fixed in 4.1)
• Omron CJ2H-CPU64-Eip Firmware: before 1.5 (fixed in 1.5)
• Omron CJ2H-CPU64 Firmware: before 1.5 (fixed in 1.5)
• Omron CJ2H-CPU65-Eip Firmware: before 1.5 (fixed in 1.5)
• Omron CJ2H-CPU65 Firmware: before 1.5 (fixed in 1.5)
• Omron CJ2H-CPU66-Eip Firmware: before 1.5 (fixed in 1.5)
• Omron CJ2H-CPU66 Firmware: before 1.5 (fixed in 1.5)
• Omron CJ2H-CPU67-Eip Firmware: before 1.5 (fixed in 1.5)
• Omron CJ2H-CPU67 Firmware: before 1.5 (fixed in 1.5)
• Omron CJ2H-CPU68-Eip Firmware: before 1.5 (fixed in 1.5)
• Omron CJ2H-CPU68 Firmware: before 1.5 (fixed in 1.5)
• Omron CJ2M-CPU11 Firmware: before 2.1 (fixed in 2.1)
• Omron CJ2M-CPU12 Firmware: before 2.1 (fixed in 2.1)
• Omron CJ2M-CPU13 Firmware: before 2.1 (fixed in 2.1)
• Omron CJ2M-CPU14 Firmware: before 2.1 (fixed in 2.1)
• Omron CJ2M-CPU15 Firmware: before 2.1 (fixed in 2.1)
• Omron CJ2M-CPU31 Firmware: before 2.1 (fixed in 2.1)
• Omron CJ2M-CPU32 Firmware: before 2.1 (fixed in 2.1)
• Omron CJ2M-CPU33 Firmware: before 2.1 (fixed in 2.1)
• Omron CJ2M-CPU34 Firmware: before 2.1 (fixed in 2.1)
• Omron CJ2M-CPU35 Firmware: before 2.1 (fixed in 2.1)
• and 21 more

Published 2024-01-22. Last modified 2026-06-17.