Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.
History

Thu, 16 Jan 2025 22:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: icscert

Published:

Updated: 2025-01-16T21:42:32.824Z

Reserved: 2023-02-13T15:41:55.590Z

Link: CVE-2023-0811

cve-icon Vulnrichment

Updated: 2024-08-02T05:24:34.505Z

cve-icon NVD

Status : Modified

Published: 2023-03-16T18:15:11.160

Modified: 2024-11-21T07:37:52.850

Link: CVE-2023-0811

cve-icon Redhat

No data.