What’s Vulnerable › Vulnerabilities
CVE-2022-45794: Omron CJ-series and CS-series unauthenticated filesystem access.
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-01-10 · updated 2026-06-17
- Weakness: CWE-306
Description
An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC internal memory and memory card.
Affected products
- Omron Sysmac Cj1G-Cpu42P Firmware: all versions
- Omron Sysmac Cj1G-Cpu43P Firmware: all versions
- Omron Sysmac Cj1G-Cpu44P Firmware: all versions
- Omron Sysmac Cj1G-Cpu45P Firmware: all versions
- Omron Sysmac Cj2H-Cpu64-Eip Firmware: all versions
- Omron Sysmac Cj2H-Cpu64 Firmware: all versions
- Omron Sysmac Cj2H-Cpu65-Eip Firmware: all versions
- Omron Sysmac Cj2H-Cpu65 Firmware: all versions
- Omron Sysmac Cj2H-Cpu66-Eip Firmware: all versions
- Omron Sysmac Cj2H-Cpu66 Firmware: all versions
- Omron Sysmac Cj2H-Cpu67-Eip Firmware: all versions
- Omron Sysmac Cj2H-Cpu67 Firmware: all versions
- Omron Sysmac Cj2H-Cpu68-Eip Firmware: all versions
- Omron Sysmac Cj2H-Cpu68 Firmware: all versions
- Omron Sysmac Cj2M-Cpu11 Firmware: all versions
- Omron Sysmac Cj2M-Cpu12 Firmware: all versions
- Omron Sysmac Cj2M-Cpu13 Firmware: all versions
- Omron Sysmac Cj2M-Cpu14 Firmware: all versions
- Omron Sysmac Cj2M-Cpu15 Firmware: all versions
- Omron Sysmac Cj2M-Cpu31 Firmware: all versions
- Omron Sysmac Cj2M-Cpu32 Firmware: all versions
- Omron Sysmac Cj2M-Cpu33 Firmware: all versions
- Omron Sysmac Cj2M-Cpu34 Firmware: all versions
- Omron Sysmac Cj2M-Cpu35 Firmware: all versions
- Omron Sysmac Cs1D-Cpu44Sa Firmware: all versions
- Omron Sysmac Cs1D-Cpu65H Firmware: all versions
- Omron Sysmac Cs1D-Cpu65P Firmware: all versions
- Omron Sysmac Cs1D-Cpu67H Firmware: all versions
- Omron Sysmac Cs1D-Cpu67Ha Firmware: all versions
- Omron Sysmac Cs1D-Cpu67P Firmware: all versions
References
- https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/
- https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-002_en.pdf
- https://www.dragos.com/advisory/omron-plc-and-engineering-software-network-and-file-format-access/
- https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2023-002_en.pdf
Get alerted when CVE-2022-45794 or the next vulnerability affects your stack