Omron CP1L-EL20DR-D Firmware vulnerabilities

2 CVEs affecting Omron CP1L-EL20DR-D Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-27396, published 2023-06-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-27396, published 2023-06-19. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks composed of OMRON…
CVE-2023-22357, published 2023-01-17. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated…