Omron Sysmac CJ2H-CPU66-Eip Firmware vulnerabilities

2 CVEs affecting Omron Sysmac CJ2H-CPU66-Eip Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-45794, published 2024-01-10.

More from Omron.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-0811, published 2023-03-16. Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days. Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region,…
• CVE-2022-45794, published 2024-01-10. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC internal memory and memory card.