What’s Vulnerable › Vulnerabilities

CVE-2023-0811

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-03-16 · updated 2026-06-17
• Weakness: CWE-284

Description

Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.

Affected products

• Omron Sysmac Cj2H-Cpu64-Eip Firmware: all versions
• Omron Sysmac Cj2H-Cpu64 Firmware: all versions
• Omron Sysmac Cj2H-Cpu65-Eip Firmware: all versions
• Omron Sysmac Cj2H-Cpu65 Firmware: all versions
• Omron Sysmac Cj2H-Cpu66-Eip Firmware: all versions
• Omron Sysmac Cj2H-Cpu66 Firmware: all versions
• Omron Sysmac Cj2H-Cpu67-Eip Firmware: all versions
• Omron Sysmac Cj2H-Cpu67 Firmware: all versions
• Omron Sysmac Cj2H-Cpu68-Eip Firmware: all versions
• Omron Sysmac Cj2H-Cpu68 Firmware: all versions
• Omron Sysmac Cj2M-Cpu11 Firmware: all versions
• Omron Sysmac Cj2M-Cpu12 Firmware: all versions
• Omron Sysmac Cj2M-Cpu13 Firmware: all versions
• Omron Sysmac Cj2M-Cpu14 Firmware: all versions
• Omron Sysmac Cj2M-Cpu15 Firmware: all versions
• Omron Sysmac Cj2M-Cpu31 Firmware: all versions
• Omron Sysmac Cj2M-Cpu32 Firmware: all versions
• Omron Sysmac Cj2M-Cpu33 Firmware: all versions
• Omron Sysmac Cj2M-Cpu34 Firmware: all versions
• Omron Sysmac Cj2M-Cpu35 Firmware: all versions
• Omron Sysmac Cp1E-E10Dr-A Firmware: all versions
• Omron Sysmac Cp1E-E10Dr-D Firmware: all versions
• Omron Sysmac Cp1E-E10Dt-A Firmware: all versions
• Omron Sysmac Cp1E-E10Dt-D Firmware: all versions
• Omron Sysmac Cp1E-E10Dt1-A Firmware: all versions
• Omron Sysmac Cp1E-E10Dt1-D Firmware: all versions
• Omron Sysmac Cp1E-E14Dr-A Firmware: all versions
• Omron Sysmac Cp1E-E14Sdr-A Firmware: all versions
• Omron Sysmac Cp1E-E20Dr-A Firmware: all versions
• Omron Sysmac Cp1E-E20Sdr-A Firmware: all versions

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-01
• https://www.ia.omron.com/product/vulnerability/OMSR-2023-001_en.pdf
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-01
• https://www.ia.omron.com/product/vulnerability/OMSR-2023-001_en.pdf

Get alerted when CVE-2023-0811 or the next vulnerability affects your stack