CVE-2022-45794
HIGHDescription
An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC internal memory and memory card.
Is your site exposed to CVE-2022-45794?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| omron | sysmac_cj2h-cpu64-eip_firmware |
| omron | sysmac_cj2h-cpu64-eip |
| omron | sysmac_cj2h-cpu64_firmware |
| omron | sysmac_cj2h-cpu64 |
| omron | sysmac_cj2h-cpu65-eip_firmware |
| omron | sysmac_cj2h-cpu65-eip |
| omron | sysmac_cj2h-cpu65_firmware |
| omron | sysmac_cj2h-cpu65 |
| omron | sysmac_cj2h-cpu66-eip_firmware |
| omron | sysmac_cj2h-cpu66-eip |
| omron | sysmac_cj2h-cpu66_firmware |
| omron | sysmac_cj2h-cpu66 |
| omron | sysmac_cj2h-cpu67-eip_firmware |
| omron | sysmac_cj2h-cpu67-eip |
| omron | sysmac_cj2h-cpu67_firmware |
| omron | sysmac_cj2h-cpu67 |
| omron | sysmac_cj2h-cpu68-eip_firmware |
| omron | sysmac_cj2h-cpu68-eip |
| omron | sysmac_cj2h-cpu68_firmware |
| omron | sysmac_cj2h-cpu68 |
| omron | sysmac_cj2m-cpu11_firmware |
| omron | sysmac_cj2m-cpu11 |
| omron | sysmac_cj2m-cpu12_firmware |
| omron | sysmac_cj2m-cpu12 |
| omron | sysmac_cj2m-cpu13_firmware |
| omron | sysmac_cj2m-cpu13 |
| omron | sysmac_cj2m-cpu14_firmware |
| omron | sysmac_cj2m-cpu14 |
| omron | sysmac_cj2m-cpu15_firmware |
| omron | sysmac_cj2m-cpu15 |
| omron | sysmac_cj2m-cpu31_firmware |
| omron | sysmac_cj2m-cpu31 |
| omron | sysmac_cj2m-cpu32_firmware |
| omron | sysmac_cj2m-cpu32 |
| omron | sysmac_cj2m-cpu33_firmware |
| omron | sysmac_cj2m-cpu33 |
| omron | sysmac_cj2m-cpu34_firmware |
| omron | sysmac_cj2m-cpu34 |
| omron | sysmac_cj2m-cpu35_firmware |
| omron | sysmac_cj2m-cpu35 |
| omron | sysmac_cj1g-cpu45p_firmware |
| omron | sysmac_cj1g-cpu45p |
| omron | sysmac_cj1g-cpu44p_firmware |
| omron | sysmac_cj1g-cpu44p |
| omron | sysmac_cj1g-cpu43p_firmware |
| omron | sysmac_cj1g-cpu43p |
| omron | sysmac_cj1g-cpu42p_firmware |
| omron | sysmac_cj1g-cpu42p |
| omron | sysmac_cs1h-cpu63h_firmware |
| omron | sysmac_cs1h-cpu63h |
| omron | sysmac_cs1h-cpu65h_firmware |
| omron | sysmac_cs1h-cpu65h |
| omron | sysmac_cs1h-cpu67h_firmware |
| omron | sysmac_cs1h-cpu67h |
| omron | sysmac_cs1h-cpu64h_firmware |
| omron | sysmac_cs1h-cpu64h |
| omron | sysmac_cs1h-cpu66h_firmware |
| omron | sysmac_cs1h-cpu66h |
| omron | sysmac_cs1g-cpu44h_firmware |
| omron | sysmac_cs1g-cpu44h |
| omron | sysmac_cs1g-cpu43h_firmware |
| omron | sysmac_cs1g-cpu43h |
| omron | sysmac_cs1g-cpu42h_firmware |
| omron | sysmac_cs1g-cpu42h |
| omron | sysmac_cs1g-cpu45h_firmware |
| omron | sysmac_cs1g-cpu45h |
| omron | sysmac_cs1d-cpu65h_firmware |
| omron | sysmac_cs1d-cpu65h |
| omron | sysmac_cs1d-cpu67h_firmware |
| omron | sysmac_cs1d-cpu67h |
| omron | sysmac_cs1d-cpu68ha_firmware |
| omron | sysmac_cs1d-cpu68ha |
| omron | sysmac_cs1d-cpu67ha_firmware |
| omron | sysmac_cs1d-cpu67ha |
| omron | sysmac_cs1d-cpu65p_firmware |
| omron | sysmac_cs1d-cpu65p |
| omron | sysmac_cs1d-cpu67sa_firmware |
| omron | sysmac_cs1d-cpu67sa |
| omron | sysmac_cs1d-cpu44sa_firmware |
| omron | sysmac_cs1d-cpu44sa |
| omron | sysmac_cs1d-cpu67p_firmware |
| omron | sysmac_cs1d-cpu67p |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2022-45794? +
How severe is CVE-2022-45794? +
What products are affected by CVE-2022-45794? +
How do I check if I'm vulnerable to CVE-2022-45794? +
Related Vulnerabilities
An improper access control vulnerability in the canonical-livepatch snap client prior to version 10.15.0 allows a local unprivileged user to …
A missing authentication vulnerability exists in the Altium 365 SearchService. A legacy SOAP endpoint exposes search index operations without requiring …
Inadequate access control in the registration process in Fullstep V5, which could allow unauthenticated users to obtain a valid JWT …
A weakness in SpiceJet’s public booking retrieval page permits full passenger booking details to be accessed using only a PNR …
A Missing Authentication for Critical Function vulnerability in the GRUB configuration used B&R APROL <4.4-01 may allow an unauthenticated physical …
A security issue exists within the 1715-AENTR EtherNet/IP Adapter. The affected product exposes a network-accessible debug port that does not …