CVE-2022-45794

Name of the Vulnerable Software and Affected Versions Omron CJ-series and CS-series PLCs, all versions

Description The issue is related to the lack of authentication for a critical function in Omron CS/CJ controllers. An attacker with network access to the affected PLC may use a network protocol to read and write files on the PLC internal memory and memory card, potentially allowing a remote attacker to access protected information.

Recommendations For Omron CJ-series and CS-series PLCs, all versions: At the moment, there is no information about a newer version that contains a fix for this vulnerability.