Vulnerability Details CVE-2023-22357
Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the firmware, causing a denial-of-service (DoS) condition, and/or arbitrary code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 76.6%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2023-22357
-
cpe:2.3:h:omron:cp1l-el20dr-d:-
-
cpe:2.3:o:omron:cp1l-el20dr-d_firmware:-