CVE-2023-38744: OMRON Corporation CJ2M CPU Unit vulnerability
OMRON Corporation · CJ2M CPU Unit
Affected: OMRON Corporation CJ2M CPU Unit · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 59% of scored CVEs
Not scored yet. The CVE record carries no CVSS score.
DescriptionCVE.org
Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product receives a packet which is specially crafted by a remote unauthenticated attacker, the unit of the affected product may fall into a denial-of-service (DoS) condition. Affected products/versions are as follows: CJ2M CPU Unit CJ2M-CPU3[] Unit version of the built-in EtherNet/IP section Ver. 2.18 and earlier, CJ2H CPU Unit CJ2H-CPU6[]-EIP Unit version of the built-in EtherNet/IP section Ver. 3.04 and earlier, CS/CJ Series EtherNet/IP Unit CS1W-EIP21 V3.04 and earlier, and CS/CJ Series EtherNet/IP Unit CJ1W-EIP21 V3.04 and earlier.
Affected products4
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- OMRON Corporation · CJ2M CPU UnitCJ2M-CPU3[] Unit version of the built-in EtherNet/IP sectio…
- OMRON Corporation · CJ2H CPU UnitCJ2H-CPU6[]-EIP Unit version of the built-in EtherNet/IP se…
- OMRON Corporation · CS/CJ Series EtherNet/IP UnitCS1W-EIP21 V3.04 and earlier
- OMRON Corporation · CS/CJ Series EtherNet/IP UnitCJ1W-EIP21 V3.04 and earlier
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- OMRON Corporation
- Published
- August 2023
CoverageNo articles yet
No CyberSIXT article names CVE-2023-38744 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.