ICS Advisory: Omron CJ/CS/CP Series

Summary:

The View CSAF document provides information on a vulnerability in Omron CJ/CS/CP series programmable logic controllers. The vulnerability, CVE-2022-45790, allows for remote exploitation with low attack complexity and no user interaction required. The vulnerability arises from the lack of rate limiting on password guesses to password-protected memory regions, making it susceptible to brute-force attacks.

The document provides details on the affected products, including specific versions that are vulnerable. Omron recommends updating the products as soon as possible, and CISA provides additional mitigation guidance and recommended practices.

The summary provides a concise overview of the vulnerability, its impact, and the recommended actions to remediate it.