Vulnerability in Omron Cj1w-Eip21
CVE-2023-38744
Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product receives a packet which is specially crafted by a remote unauthenticated attacker, the unit of the affected product may fall into a denial-of-service (DoS) condition. Affected products/versions are as follows: CJ2M CPU Unit CJ2M-CPU3[] Unit version of the built-in EtherNet/IP section Ver. 2.18 and earlier, CJ2H CPU Unit CJ2H-CPU6[]-EIP Unit version of the built-in EtherNet/IP section Ver. 3.04 and earlier, CS/CJ Series EtherNet/IP Unit CS1W-EIP21 V3.04 and earlier, and CS/CJ Series EtherNet/IP Unit CJ1W-EIP21 V3.04 and earlier.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.009 (57.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 57th percentile — 57.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.009 · newest: 0.009 · change: 0.000
Affected products
Weakness classification (CWE)
References
- www.ia.omron.com/product/vulnerability/OMSR-2023-006_en.pdf (Vendor Advisory)
- jvn.jp/en/vu/JVNVU92193064/ (Third Party Advisory)
Frequently asked questions
- What is CVE-2023-38744?
- CVE-2023-38744 is a high-severity vulnerability in Omron Cj1w-Eip21, classified under Improper Validation of Specified Quantity in Input. CVSS score: 7.5/10. Published 2023-08-03.
- How severe is CVE-2023-38744?
- High severity. CVSS v3 base score is 7.5 out of 10.