cj2m-cpu35_firmware 安全漏洞 (CVE-2023-38744)
CVE编号
CVE-2023-38744利用情况
暂无补丁情况
N/A披露时间
2023-07-25漏洞描述
Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product receives a packet which is specially crafted by a remote unauthenticated attacker, the unit of the affected product may fall into a denial-of-service (DoS) condition. Affected products/versions are as follows: CJ2M CPU Unit CJ2M-CPU3[] Unit version of the built-in EtherNet/IP section Ver. 2.18 and earlier, CJ2H CPU Unit CJ2H-CPU6[]-EIP Unit version of the built-in EtherNet/IP section Ver. 3.04 and earlier, CS/CJ Series EtherNet/IP Unit CS1W-EIP21 V3.04 and earlier, and CS/CJ Series EtherNet/IP Unit CJ1W-EIP21 V3.04 and earlier.解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接 |
|
|---|---|
| https://jvn.jp/en/vu/JVNVU92193064/ | |
| https://www.ia.omron.com/product/vulnerability/OMSR-2023-006_en.pdf |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | omron | cj1w-eip21_firmware | * | Up to (including) 3.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | omron | cj2h-cpu64-eip_firmware | * | Up to (including) 3.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | omron | cj2h-cpu65-eip_firmware | * | Up to (including) 3.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | omron | cj2h-cpu66-eip_firmware | * | Up to (including) 3.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | omron | cj2h-cpu67-eip_firmware | * | Up to (including) 3.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | omron | cj2h-cpu68-eip_firmware | * | Up to (including) 3.04 | |||||
| 运行在以下环境 | |||||||||
| 系统 | omron | cj2m-cpu31_firmware | * | Up to (including) 2.18 | |||||
| 运行在以下环境 | |||||||||
| 系统 | omron | cj2m-cpu32_firmware | * | Up to (including) 2.18 | |||||
| 运行在以下环境 | |||||||||
| 系统 | omron | cj2m-cpu33_firmware | * | Up to (including) 2.18 | |||||
| 运行在以下环境 | |||||||||
| 系统 | omron | cj2m-cpu34_firmware | * | Up to (including) 2.18 | |||||
| 运行在以下环境 | |||||||||
| 系统 | omron | cj2m-cpu35_firmware | * | Up to (including) 2.18 | |||||
| 运行在以下环境 | |||||||||
| 系统 | omron | cs1w-eip21_firmware | * | Up to (including) 3.04 | |||||
| 运行在以下环境 | |||||||||
| 硬件 | omron | cj1w-eip21 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | omron | cj2h-cpu64-eip | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | omron | cj2h-cpu65-eip | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | omron | cj2h-cpu66-eip | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | omron | cj2h-cpu67-eip | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | omron | cj2h-cpu68-eip | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | omron | cj2m-cpu31 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | omron | cj2m-cpu32 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | omron | cj2m-cpu33 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | omron | cj2m-cpu34 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | omron | cj2m-cpu35 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | omron | cs1w-eip21 | - | - | |||||
- 攻击路径 网络
- 攻击复杂度 低
- 权限要求 无
- 影响范围 未更改
- 用户交互 无
- 可用性 高
- 保密性 无
- 完整性 无
| CWE-ID | 漏洞类型 |
| NVD-CWE-Other |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论