CVE-2023-0811: Omron Sysmac CJ2H-CPU64-Eip Firmware

Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.

Affected products

  • Omron Sysmac CJ2H-CPU64-Eip Firmware: affected versions not specified
  • Omron Sysmac CJ2H-CPU64 Firmware: affected versions not specified
  • Omron Sysmac CJ2H-CPU65-Eip Firmware: affected versions not specified
  • Omron Sysmac CJ2H-CPU65 Firmware: affected versions not specified
  • Omron Sysmac CJ2H-CPU66-Eip Firmware: affected versions not specified
  • Omron Sysmac CJ2H-CPU66 Firmware: affected versions not specified
  • Omron Sysmac CJ2H-CPU67-Eip Firmware: affected versions not specified
  • Omron Sysmac CJ2H-CPU67 Firmware: affected versions not specified
  • Omron Sysmac CJ2H-CPU68-Eip Firmware: affected versions not specified
  • Omron Sysmac CJ2H-CPU68 Firmware: affected versions not specified
  • Omron Sysmac CJ2M-CPU11 Firmware: affected versions not specified
  • Omron Sysmac CJ2M-CPU12 Firmware: affected versions not specified
  • Omron Sysmac CJ2M-CPU13 Firmware: affected versions not specified
  • Omron Sysmac CJ2M-CPU14 Firmware: affected versions not specified
  • Omron Sysmac CJ2M-CPU15 Firmware: affected versions not specified
  • Omron Sysmac CJ2M-CPU31 Firmware: affected versions not specified
  • Omron Sysmac CJ2M-CPU32 Firmware: affected versions not specified
  • Omron Sysmac CJ2M-CPU33 Firmware: affected versions not specified
  • Omron Sysmac CJ2M-CPU34 Firmware: affected versions not specified
  • Omron Sysmac CJ2M-CPU35 Firmware: affected versions not specified
  • Omron Sysmac CP1E-e10dr-A Firmware: affected versions not specified
  • Omron Sysmac CP1E-e10dr-D Firmware: affected versions not specified
  • Omron Sysmac CP1E-e10dt-A Firmware: affected versions not specified
  • Omron Sysmac CP1E-e10dt-D Firmware: affected versions not specified
  • Omron Sysmac CP1E-e10dt1-A Firmware: affected versions not specified
  • and 103 more

Published 2023-03-16. Last modified 2026-06-17.