What’s Vulnerable › Vulnerabilities

CVE-2022-45790: Omron FINS memory protection susceptible to bruteforce

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-01-22 · updated 2026-06-17
• Weakness: CWE-307

Description

The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected memory. This access can allow overwrite of values including programmed logic.

Affected products

• Omron Cj1G-Cpu42P Firmware: before 4.1 — fixed in 4.1
• Omron Cj1G-Cpu43P Firmware: before 4.1 — fixed in 4.1
• Omron Cj1G-Cpu44P Firmware: before 4.1 — fixed in 4.1
• Omron Cj1G-Cpu45P-Gtc Firmware: before 4.1 — fixed in 4.1
• Omron Cj1G-Cpu45P Firmware: before 4.1 — fixed in 4.1
• Omron Cj2H-Cpu64-Eip Firmware: before 1.5 — fixed in 1.5
• Omron Cj2H-Cpu64 Firmware: before 1.5 — fixed in 1.5
• Omron Cj2H-Cpu65-Eip Firmware: before 1.5 — fixed in 1.5
• Omron Cj2H-Cpu65 Firmware: before 1.5 — fixed in 1.5
• Omron Cj2H-Cpu66-Eip Firmware: before 1.5 — fixed in 1.5
• Omron Cj2H-Cpu66 Firmware: before 1.5 — fixed in 1.5
• Omron Cj2H-Cpu67-Eip Firmware: before 1.5 — fixed in 1.5
• Omron Cj2H-Cpu67 Firmware: before 1.5 — fixed in 1.5
• Omron Cj2H-Cpu68-Eip Firmware: before 1.5 — fixed in 1.5
• Omron Cj2H-Cpu68 Firmware: before 1.5 — fixed in 1.5
• Omron Cj2M-Cpu11 Firmware: before 2.1 — fixed in 2.1
• Omron Cj2M-Cpu12 Firmware: before 2.1 — fixed in 2.1
• Omron Cj2M-Cpu13 Firmware: before 2.1 — fixed in 2.1
• Omron Cj2M-Cpu14 Firmware: before 2.1 — fixed in 2.1
• Omron Cj2M-Cpu15 Firmware: before 2.1 — fixed in 2.1
• Omron Cj2M-Cpu31 Firmware: before 2.1 — fixed in 2.1
• Omron Cj2M-Cpu32 Firmware: before 2.1 — fixed in 2.1
• Omron Cj2M-Cpu33 Firmware: before 2.1 — fixed in 2.1
• Omron Cj2M-Cpu34 Firmware: before 2.1 — fixed in 2.1
• Omron Cj2M-Cpu35 Firmware: before 2.1 — fixed in 2.1
• Omron Cj2M-Md211 Firmware: before 2.1 — fixed in 2.1
• Omron Cj2M-Md212 Firmware: before 2.1 — fixed in 2.1
• Omron Cp1E-E Firmware: before 1.3 — fixed in 1.3
• Omron Cp1E-N Firmware: before 1.3 — fixed in 1.3
• Omron Cs1D-Cpu42S Firmware: before 2.1 — fixed in 2.1

How to fix

Upgrade to a fixed version: Omron Cj1G-Cpu42P Firmware 4.1; Omron Cj1G-Cpu43P Firmware 4.1; Omron Cj1G-Cpu44P Firmware 4.1; Omron Cj1G-Cpu45P-Gtc Firmware 4.1; Omron Cj1G-Cpu45P Firmware 4.1; Omron Cj2H-Cpu64-Eip Firmware 1.5; Omron Cj2H-Cpu64 Firmware 1.5; Omron Cj2H-Cpu65-Eip Firmware 1.5; Omron Cj2H-Cpu65 Firmware 1.5; Omron Cj2H-Cpu66-Eip Firmware 1.5; Omron Cj2H-Cpu66 Firmware 1.5; Omron Cj2H-Cpu67-Eip Firmware 1.5. Check the vendor advisory for mitigations.

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-262-05
• https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/
• https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-010_en.pdf
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-262-05
• https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/
• https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-010_en.pdf

Get alerted when CVE-2022-45790 or the next vulnerability affects your stack