CVE-2023-22357

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the firmware, causing a denial-of-service (DoS) condition, and/or arbitrary code execution.
References
Link Resource
https://jvn.jp/en/vu/JVNVU97575890/index.html Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:omron:cp1l-el20dr-d_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:omron:cp1l-el20dr-d:-:*:*:*:*:*:*:*

Information

Published : 2023-01-17 02:15

Updated : 2023-01-24 13:00


NVD link : CVE-2023-22357

Mitre link : CVE-2023-22357


JSON object : View

Advertisement

dedicated server usa

Products Affected

omron

  • cp1l-el20dr-d_firmware
  • cp1l-el20dr-d