{"id":"CVE-2023-0811","aliases":["EUVD-2023-12816","GHSA-xmm9-hrfr-pphf"],"status":"published","title":"Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM...","description":"Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00621,"percentile":0.50102,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2023-03-16T17:41:25Z","modified":"2026-06-17T05:26:21Z","products":[{"vendor":"omron","product":"cj1m sysmac cj-series"},{"vendor":"omron","product":"cj1m sysmac cp-series"},{"vendor":"omron","product":"cj1m sysmac cs-series"},{"vendor":"omron","product":"sysmac_cj2h-cpu64-eip_firmware"},{"vendor":"omron","product":"sysmac_cj2h-cpu64_firmware"},{"vendor":"omron","product":"sysmac_cj2h-cpu65-eip_firmware"},{"vendor":"omron","product":"sysmac_cj2h-cpu65_firmware"},{"vendor":"omron","product":"sysmac_cj2h-cpu66-eip_firmware"},{"vendor":"omron","product":"sysmac_cj2h-cpu66_firmware"},{"vendor":"omron","product":"sysmac_cj2h-cpu67-eip_firmware"},{"vendor":"omron","product":"sysmac_cj2h-cpu67_firmware"},{"vendor":"omron","product":"sysmac_cj2h-cpu68-eip_firmware"},{"vendor":"omron","product":"sysmac_cj2h-cpu68_firmware"},{"vendor":"omron","product":"sysmac_cj2m-cpu11_firmware"},{"vendor":"omron","product":"sysmac_cj2m-cpu12_firmware"},{"vendor":"omron","product":"sysmac_cj2m-cpu13_firmware"},{"vendor":"omron","product":"sysmac_cj2m-cpu14_firmware"},{"vendor":"omron","product":"sysmac_cj2m-cpu15_firmware"},{"vendor":"omron","product":"sysmac_cj2m-cpu31_firmware"},{"vendor":"omron","product":"sysmac_cj2m-cpu32_firmware"},{"vendor":"omron","product":"sysmac_cj2m-cpu33_firmware"},{"vendor":"omron","product":"sysmac_cj2m-cpu34_firmware"},{"vendor":"omron","product":"sysmac_cj2m-cpu35_firmware"},{"vendor":"omron","product":"sysmac_cp1e-e10dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1e-e10dr-d_firmware"},{"vendor":"omron","product":"sysmac_cp1e-e10dt-a_firmware"},{"vendor":"omron","product":"sysmac_cp1e-e10dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp1e-e10dt1-a_firmware"},{"vendor":"omron","product":"sysmac_cp1e-e10dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp1e-e14dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1e-e14sdr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1e-e20dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1e-e20sdr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1e-e30dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1e-e30sdr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1e-e40dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1e-e40sdr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1e-e60sdr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1e-na20dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1e-na20dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp1e-na20dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp1h-x40dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1h-x40dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp1h-x40dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp1h-xa40dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1h-xa40dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp1h-xa40dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp1h-y20dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-el20dr-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-em30dr-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-em30dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-em30dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-em40dr-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-em40dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-em40dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-l10dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1l-l10dr-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-l10dt-a_firmware"},{"vendor":"omron","product":"sysmac_cp1l-l10dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-l10dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-l14dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1l-l14dr-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-l14dt-a_firmware"},{"vendor":"omron","product":"sysmac_cp1l-l14dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-l14dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-l20dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1l-l20dr-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-l20dt-a_firmware"},{"vendor":"omron","product":"sysmac_cp1l-l20dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-l20dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-m30dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1l-m30dr-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-m30dt-a_firmware"},{"vendor":"omron","product":"sysmac_cp1l-m30dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-m30dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-m40dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1l-m40dr-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-m40dt-a_firmware"},{"vendor":"omron","product":"sysmac_cp1l-m40dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-m40dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-m60dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp1l-m60dr-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-m60dt-a_firmware"},{"vendor":"omron","product":"sysmac_cp1l-m60dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp1l-m60dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-e14dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-e20dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-e30dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-e40dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-e60dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n14dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n14dr-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n14dt-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n14dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n14dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n20dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n20dr-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n20dt-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n20dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n20dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n30dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n30dr-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n30dt-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n30dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n30dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n40dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n40dr-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n40dt-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n40dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n40dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n60dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n60dr-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n60dt-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n60dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-n60dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-s30dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-s30dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-s30dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-s40dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-s40dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-s40dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-s60dr-a_firmware"},{"vendor":"omron","product":"sysmac_cp2e-s60dt-d_firmware"},{"vendor":"omron","product":"sysmac_cp2e-s60dt1-d_firmware"},{"vendor":"omron","product":"sysmac_cs1w-drm21-v1_firmware"},{"vendor":"omron","product":"sysmac_cs1w-eip21_firmware"},{"vendor":"omron","product":"sysmac_cs1w-etn21_firmware"},{"vendor":"omron","product":"sysmac_cs1w-fln22_firmware"},{"vendor":"omron","product":"sysmac_cs1w-nc\\[\\]71_firmware"},{"vendor":"omron","product":"sysmac_cs1w-spu01-v2_firmware"},{"vendor":"omron","product":"sysmac_cs1w-spu02-v2_firmware"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-073-01","tags":["x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://www.ia.omron.com/product/vulnerability/OMSR-2023-001_en.pdf","tags":["x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0811"},{"url":"https://github.com/advisories/GHSA-xmm9-hrfr-pphf"}],"sources":{"cve":[{"id":"CVE-2023-0811","description":"\nOmron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program. \n\n","status":"published","published":"2023-03-16T17:41:25.525Z","modified":"2025-01-16T21:42:32.824Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:35:35.256261Z"}],"euvd":[{"id":"EUVD-2023-12816","description":"\nOmron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program. \n\n","status":"published","published":"2023-03-16T17:41:25Z","modified":"2025-01-16T21:42:32Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:04:17.573711Z"}],"ghsa":[{"id":"GHSA-xmm9-hrfr-pphf","title":"Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM...","description":"Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.","status":"published","published":"2023-03-16T18:30:28Z","modified":"2023-04-05T05:08:04Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:54:26.767421Z"}],"nvd":[{"id":"CVE-2023-0811","description":"\nOmron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program. \n\n","status":"published","published":"2023-03-16T18:15:11.16Z","modified":"2026-06-17T05:26:21.667Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:07:49.031498Z"}]}}