2023-08-03 06:00:28 +00:00
{
"id" : "CVE-2023-38744" ,
"sourceIdentifier" : "vultures@jpcert.or.jp" ,
"published" : "2023-08-03T05:15:10.417" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-21T08:14:09.647" ,
2024-10-17 18:03:18 +00:00
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-08-03 06:00:28 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product receives a packet which is specially crafted by a remote unauthenticated attacker, the unit of the affected product may fall into a denial-of-service (DoS) condition. Affected products/versions are as follows: CJ2M CPU Unit CJ2M-CPU3[] Unit version of the built-in EtherNet/IP section Ver. 2.18 and earlier, CJ2H CPU Unit CJ2H-CPU6[]-EIP Unit version of the built-in EtherNet/IP section Ver. 3.04 and earlier, CS/CJ Series EtherNet/IP Unit CS1W-EIP21 V3.04 and earlier, and CS/CJ Series EtherNet/IP Unit CJ1W-EIP21 V3.04 and earlier."
}
] ,
2023-08-11 22:00:30 +00:00
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH" ,
2023-08-11 22:00:30 +00:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "HIGH"
2023-08-11 22:00:30 +00:00
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 3.6
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-Other"
}
]
2024-10-17 18:03:18 +00:00
} ,
{
"source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-1284"
}
]
2023-08-11 22:00:30 +00:00
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:omron:cj2m-cpu35_firmware:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "2.18" ,
"matchCriteriaId" : "86207B5A-24B2-49D4-B1CF-16CBD77795E1"
2023-08-11 22:00:30 +00:00
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:omron:cj2m-cpu35:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "603BAD60-89F1-4EE9-8413-F301DFC91AFF"
2023-08-11 22:00:30 +00:00
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:omron:cj2m-cpu34_firmware:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "2.18" ,
"matchCriteriaId" : "1663D7F0-B7FB-48E9-A703-AB042D71A59D"
2023-08-11 22:00:30 +00:00
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:omron:cj2m-cpu34:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "37C6982F-75F4-497B-8BF9-DC683304B43D"
2023-08-11 22:00:30 +00:00
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:omron:cj2m-cpu33_firmware:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "2.18" ,
"matchCriteriaId" : "7A7C2980-D232-4753-956F-FB0ED0978B70"
2023-08-11 22:00:30 +00:00
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:omron:cj2m-cpu33:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2ED8CAFA-62BB-4AC9-BAEF-C1FD50F57B1F"
2023-08-11 22:00:30 +00:00
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:omron:cj2m-cpu32_firmware:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "2.18" ,
"matchCriteriaId" : "5E4DE86F-19D2-465B-90D6-1A139EE65B52"
2023-08-11 22:00:30 +00:00
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:omron:cj2m-cpu32:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DD09E48C-5395-418F-8542-B0C00721CF97"
2023-08-11 22:00:30 +00:00
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:omron:cj2m-cpu31_firmware:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "2.18" ,
"matchCriteriaId" : "BDBC7469-32E3-4997-83C4-65B121571187"
2023-08-11 22:00:30 +00:00
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:omron:cj2m-cpu31:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A5B09D3A-E765-46FE-8EAF-9A2FCFA42947"
2023-08-11 22:00:30 +00:00
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:omron:cj2h-cpu68-eip_firmware:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "3.04" ,
"matchCriteriaId" : "8C40D156-34C1-437B-9252-AED69DAE06C2"
2023-08-11 22:00:30 +00:00
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:omron:cj2h-cpu68-eip:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6B08AA4C-6F83-4387-A5FD-F49C54D9545F"
2023-08-11 22:00:30 +00:00
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:omron:cj2h-cpu67-eip_firmware:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "3.04" ,
"matchCriteriaId" : "AE958646-DC95-425D-9CDE-76AFDFDD2B19"
2023-08-11 22:00:30 +00:00
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:omron:cj2h-cpu67-eip:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4530B900-322D-4B9E-AA34-D63CA546190A"
2023-08-11 22:00:30 +00:00
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:omron:cj2h-cpu66-eip_firmware:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "3.04" ,
"matchCriteriaId" : "F1FA052E-724C-4E32-A6C7-557F20023A0C"
2023-08-11 22:00:30 +00:00
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
2024-12-08 03:06:42 +00:00
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:omron:cj2h-cpu66-eip:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "51114B75-A8DD-49F4-8AC3-BA46C1D4F89C"
2023-08-11 22:00:30 +00:00
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:omron:cj2h-cpu65-eip_firmware:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "3.04" ,
"matchCriteriaId" : "B9731DA2-1FA8-4FFD-B67E-594C638C4B1C"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:omron:cj2h-cpu65-eip:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "871B2A06-6AAC-43DF-AF1A-848E9C804016"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:omron:cj2h-cpu64-eip_firmware:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "3.04" ,
"matchCriteriaId" : "009162A7-2E76-411E-BBE8-86FFB6B4502B"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:omron:cj2h-cpu64-eip:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6D2D2A32-4326-4357-A400-EA26B362D821"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:omron:cs1w-eip21_firmware:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "3.04" ,
"matchCriteriaId" : "6831BA7B-BA51-4A4F-9951-9054AEFC6FB7"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:omron:cs1w-eip21:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2A755464-0A9C-42CB-84D1-0884917C3DFA"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:omron:cj1w-eip21_firmware:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "3.04" ,
"matchCriteriaId" : "3D9FA9F9-3D3D-4C10-99AB-B70E142867EB"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:omron:cj1w-eip21:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5281AB25-8321-41B6-9F37-AB66718ACFC9"
}
]
}
]
}
] ,
2023-08-03 06:00:28 +00:00
"references" : [
{
"url" : "https://jvn.jp/en/vu/JVNVU92193064/" ,
2023-08-11 22:00:30 +00:00
"source" : "vultures@jpcert.or.jp" ,
"tags" : [
"Third Party Advisory"
]
2023-08-03 06:00:28 +00:00
} ,
{
"url" : "https://www.ia.omron.com/product/vulnerability/OMSR-2023-006_en.pdf" ,
2023-08-11 22:00:30 +00:00
"source" : "vultures@jpcert.or.jp" ,
"tags" : [
"Vendor Advisory"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://jvn.jp/en/vu/JVNVU92193064/" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Third Party Advisory"
]
} ,
{
"url" : "https://www.ia.omron.com/product/vulnerability/OMSR-2023-006_en.pdf" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
2023-08-03 06:00:28 +00:00
}
]
}
