Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-27396

Published: 19/06/2023 Updated: 30/06/2023
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0
Subscribe to Omron

Vulnerability Summary

FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues -- (1)Plaintext communication, and (2)No authentication required. When FINS messages are intercepted, the contents may be retrieved. When arbitrary FINS messages are injected, any commands may be executed on, or the system information may be retrieved from, the affected device. Affected products and versions are as follows: SYSMAC CS-series CPU Units, all versions, SYSMAC CJ-series CPU Units, all versions, SYSMAC CP-series CPU Units, all versions, SYSMAC NJ-series CPU Units, all versions, SYSMAC NX1P-series CPU Units, all versions, SYSMAC NX102-series CPU Units, all versions, and SYSMAC NX7 Database Connection CPU Units (Ver.1.16 or later)

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

omron cs1w-eip21_firmware

omron cs1w-spu01-v2_firmware

omron cs1w-spu02-v2_firmware

omron cs1w-etn21_firmware

omron cs1w-clk_firmware

omron cs1w-fln22_firmware

omron cs1w-drm21-v1_firmware

omron cs1w-nc271_firmware -

omron cs1w-nc471_firmware -

omron cs1w-ncf71_firmware -

omron cj2m-cpu35_firmware -

omron cj2m-cpu34_firmware -

omron cj2m-cpu33_firmware -

omron cj2m-cpu32_firmware -

omron cj2m-cpu31_firmware -

omron cj2m-cpu15_firmware -

omron cj2m-cpu14_firmware -

omron cj2m-cpu13_firmware -

omron cj2m-cpu12_firmware -

omron cj2m-cpu11_firmware -

omron cp1w-cif01_firmware -

omron cp1w-cif11_firmware -

omron cp1w-cif12-v1_firmware -

omron cj2m-md211_firmware -

omron cj2m-md212_firmware -

omron cj2h-cpu68-eip_firmware -

omron cj2h-cpu67-eip_firmware -

omron cj2h-cpu66-eip_firmware -

omron cj2h-cpu65-eip_firmware -

omron cj2h-cpu64-eip_firmware -

omron cj2h-cpu68_firmware -

omron cj2h-cpu67_firmware -

omron cj2h-cpu66_firmware -

omron cj2h-cpu65_firmware -

omron cj2h-cpu64_firmware -

omron cp2e-n14dr-a_firmware -

omron cp2e-n14dt-a_firmware -

omron cp2e-n14dr-d_firmware -

omron cp2e-n14dt-d_firmware -

omron cp2e-n14dt1-d_firmware -

omron cp2e-n20dr-a_firmware -

omron cp2e-n20dt-a_firmware -

omron cp2e-n20dr-d_firmware -

omron cp2e-n20dt-d_firmware -

omron cp2e-n20dt1-d_firmware -

omron cp2e-n30dr-a_firmware -

omron cp2e-n30dt-a_firmware -

omron cp2e-n30dr-d_firmware -

omron cp2e-n30dt-d_firmware -

omron cp2e-n30dt1-d_firmware -

omron cp2e-n40dr-a_firmware -

omron cp2e-n40dt-a_firmware -

omron cp2e-n40dr-d_firmware -

omron cp2e-n40dt-d_firmware -

omron cp2e-n40dt1-d_firmware -

omron cp2e-n60dr-a_firmware -

omron cp2e-n60dt-a_firmware -

omron cp2e-n60dr-d_firmware -

omron cp2e-n60dt-d_firmware -

omron cp2e-n60dt1-d_firmware -

omron cp2e-s30dr-a_firmware -

omron cp2e-s30dt-d_firmware -

omron cp2e-s30dt1-d_firmware -

omron cp2e-s40dr-a_firmware -

omron cp2e-s40dt-d_firmware -

omron cp2e-s40dt1-d_firmware -

omron cp2e-s60dr-a_firmware -

omron cp2e-s60dt-d_firmware -

omron cp2e-s60dt1-d_firmware -

omron cp2e-e14dr-a_firmware -

omron cp2e-e20dr-a_firmware -

omron cp2e-e30dr-a_firmware -

omron cp2e-e40dr-a_firmware -

omron cp2e-e60dr-a_firmware -

omron cp2w-cifd1_firmware -

omron cp2w-cifd2_firmware -

omron cp2w-cifd3_firmware -

omron cp1w-adb21_firmware -

omron cp1w-dab21v_firmware -

omron cp1w-mab221_firmware -

omron cp1w-8ed_firmware -

omron cp1w-8er_firmware -

omron cp1w-8et_firmware -

omron cp1w-8et1_firmware -

omron cp1w-16er_firmware -

omron cp1w-16et_firmware -

omron cp1w-16et1_firmware -

omron cp1w-32er_firmware -

omron cp1w-32et_firmware -

omron cp1w-32et1_firmware -

omron cp1w-20edr1_firmware -

omron cp1w-20edt_firmware -

omron cp1w-20edt1_firmware -

omron cp1w-40edr_firmware -

omron cp1w-40edt_firmware -

omron cp1w-40edt1_firmware -

omron cp1w-ad041_firmware -

omron cp1w-ad042_firmware -

omron cp1w-da021_firmware -

omron cp1w-da041_firmware -

omron cp1w-da042_firmware -

omron cp1w-mad44_firmware -

omron cp1w-mad42_firmware -

omron cp1w-mad11_firmware -

omron cp1w-ts001_firmware -

omron cp1w-ts002_firmware -

omron cp1w-ts101_firmware -

omron cp1w-ts102_firmware -

omron cp1w-ts003_firmware -

omron cp1w-ts004_firmware -

omron cp1w-cn811_firmware -

omron cp1h-x40dr-a_firmware -

omron cp1h-x40dt-d_firmware -

omron cp1h-x40dt1-d_firmware -

omron cp1h-xa40dr-a_firmware -

omron cp1h-xa40dt-d_firmware -

omron cp1h-xa40dt1-d_firmware -

omron cp1h-y20dt-d_firmware -

omron cp1w-cif41_firmware -

omron cp1w-dam01_firmware -

omron cp1w-me05m_firmware -

omron cp1w-srt21_firmware -

omron cp1w-ext01_firmware -

omron cp1l-em40dr-d_firmware -

omron cp1l-em40dt-d_firmware -

omron cp1l-em40dt1-d_firmware -

omron cp1l-em30dr-d_firmware -

omron cp1l-em30dt-d_firmware -

omron cp1l-em30dt1-d_firmware -

omron cp1l-el20dr-d_firmware -

omron cp1l-el20dt-d_firmware -

omron cp1l-el20dt1-d_firmware -

omron cp1l-m60dr-a_firmware -

omron cp1l-m60dt-a_firmware -

omron cp1l-m60dr-d_firmware -

omron cp1l-m60dt-d_firmware -

omron cp1l-m60dt1-d_firmware -

omron cp1l-m40dr-a_firmware -

omron cp1l-m40dt-a_firmware -

omron cp1l-m40dr-d_firmware -

omron cp1l-m40dt-d_firmware -

omron cp1l-m40dt1-d_firmware -

omron cp1l-m30dr-a_firmware -

omron cp1l-m30dt-a_firmware -

omron cp1l-m30dr-d_firmware -

omron cp1l-m30dt-d_firmware -

omron cp1l-m30dt1-d_firmware -

omron cp1l-l20dr-a_firmware -

omron cp1l-l20dt-a_firmware -

omron cp1l-l20dr-d_firmware -

omron cp1l-l20dt-d_firmware -

omron cp1l-l20dt1-d_firmware -

omron cp1l-l14dr-a_firmware -

omron cp1l-l14dt-a_firmware -

omron cp1l-l14dr-d_firmware -

omron cp1l-l14dt-d_firmware -

omron cp1l-l14dt1-d_firmware -

omron cp1l-l10dr-a_firmware -

omron cp1l-l10dt-a_firmware -

omron cp1l-l10dr-d_firmware -

omron cp1l-l10dt-d_firmware -

omron cp1l-l10dt1-d_firmware -

omron cp1e-e14sdr-a_firmware -

omron cp1e-e20sdr-a_firmware -

omron cp1e-e30sdr-a_firmware -

omron cp1e-e40sdr-a_firmware -

omron cp1e-e60sdr-a_firmware -

omron cp1e-e10dr-a_firmware -

omron cp1e-e10dt-a_firmware -

omron cp1e-e10dt1-a_firmware -

omron cp1e-e10dr-d_firmware -

omron cp1e-e10dt-d_firmware -

omron cp1e-e10dt1-d_firmware -

omron cp1e-e14dr-a_firmware -

omron cp1e-e20dr-a_firmware -

omron cp1e-e30dr-a_firmware -

omron cp1e-e40dr-a_firmware -

omron cp1e-n30s1dr-a_firmware -

omron cp1e-n30s1dt-d_firmware -

omron cp1e-n30s1dt1-d_firmware -

omron cp1e-n40s1dr-a_firmware -

omron cp1e-n40s1dt-d_firmware -

omron cp1e-n40s1dt1-d_firmware -

omron cp1e-n60s1dr-a_firmware -

omron cp1e-n60s1dt-d_firmware -

omron cp1e-n60s1dt1-d_firmware -

omron cp1e-n30sdr-a_firmware -

omron cp1e-n30sdt-d_firmware -

omron cp1e-n30sdt1-d_firmware -

omron cp1e-n40sdr-a_firmware -

omron cp1e-n40sdt-d_firmware -

omron cp1e-n40sdt1-d_firmware -

omron cp1e-n60sdr-a_firmware -

omron cp1e-n60sdt-d_firmware -

omron cp1e-n60sdt1-d_firmware -

omron cp1e-n14dr-a_firmware -

omron cp1e-n14dt-a_firmware -

omron cp1e-n14dt1-a_firmware -

omron cp1e-n14dr-d_firmware -

omron cp1e-n14dt-d_firmware -

omron cp1e-n14dt1-d_firmware -

omron cp1e-n20dr-a_firmware -

omron cp1e-n20dt-a_firmware -

omron cp1e-n20dt1-a_firmware -

omron cp1e-n20dr-d_firmware -

omron cp1e-n20dt-d_firmware -

omron cp1e-n20dt1-d_firmware -

omron cp1e-n30dr-a_firmware -

omron cp1e-n30dt-a_firmware -

omron cp1e-n30dt1-a_firmware -

omron cp1e-n30dr-d_firmware -

omron cp1e-n30dt-d_firmware -

omron cp1e-n30dt1-d_firmware -

omron cp1e-n40dr-a_firmware -

omron cp1e-n40dt-a_firmware -

omron cp1e-n40dt1-a_firmware -

omron cp1e-n40dr-d_firmware -

omron cp1e-n40dt-d_firmware -

omron cp1e-n40dt1-d_firmware -

omron cp1e-n60dr-a_firmware -

omron cp1e-n60dt-a_firmware -

omron cp1e-n60dt1-a_firmware -

omron cp1e-n60dr-d_firmware -

omron cp1e-n60dt-d_firmware -

omron cp1e-n60dt1-d_firmware -

omron cp1e-na20dr-a_firmware -

omron cp1e-na20dt-d_firmware -

omron cp1e-na20dt1-d_firmware -

omron nj501-1500_firmware -

omron nj501-1400_firmware -

omron nj501-1300_firmware -

omron nj-pa3001_firmware -

omron nj-pd3001_firmware -

omron nj501-r400_firmware -

omron nj501-r420_firmware -

omron nj501-r300_firmware -

omron nj501-r320_firmware -

omron nj501-r520_firmware -

omron nj501-r500_firmware -

omron nj501-5300_firmware -

omron nj501-1520_firmware -

omron nj501-1420_firmware -

omron nj501-1320_firmware -

omron nj101-1020_firmware -

omron nj101-9020_firmware -

omron nj501-1340_firmware -

omron nj501-4400_firmware -

omron nj501-4300_firmware -

omron nj501-4500_firmware -

omron nj501-4310_firmware -

omron nj501-4320_firmware -

omron nj301-1200_firmware -

omron nj301-1100_firmware -

omron nj101-1000_firmware -

omron nj101-9000_firmware -

omron nx1p2-1140dt_firmware -

omron nx1p2-1140dt1_firmware -

omron nx1p2-1040dt_firmware -

omron nx1p2-1040dt1_firmware -

omron nx1p2-9024dt_firmware -

omron nx1p2-9024dt1_firmware -

omron nx102-1200_firmware -

omron nx102-1100_firmware -

omron nx102-1000_firmware -

omron nx102-9000_firmware -

omron nx102-1220_firmware -

omron nx102-1120_firmware -

omron nx102-1020_firmware -

omron nx102-9020_firmware -

omron nx701-1720_firmware

omron nx701-1620_firmware

References

CWE-306https://www.fa.omron.co.jp/product/vulnerability/OMSR-2023-003_ja.pdfhttps://jvn.jp/ta/JVNTA91513661/https://www.us-cert.gov/ics/advisories/icsa-19-346-02https://jvn.jp/en/ta/JVNTA91513661/https://www.ia.omron.com/product/vulnerability/OMSR-2023-003_en.pdfhttps://www.us-cert.gov/ics/advisories/icsa-20-063-03https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-02https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook