Omron SYSMAC CS1 1.16 FINS improper authentication

Summaryinfo

A vulnerability classified as critical has been found in Omron SYSMAC CS1, SYSMAC CJ1, SYSMAC CP1, SYSMAC CP2, SYSMAC NJ and SYSMAC NX 1.16. This vulnerability affects unknown code of the component FINS Handler. The manipulation leads to improper authentication. This vulnerability is traded as CVE-2023-27396. There is no exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in Omron SYSMAC CS1, SYSMAC CJ1, SYSMAC CP1, SYSMAC CP2, SYSMAC NJ and SYSMAC NX 1.16 (SCADA Software). It has been rated as critical. This issue affects some unknown processing of the component FINS Handler. The manipulation with an unknown input leads to a improper authentication vulnerability. Using CWE to declare the problem leads to CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues -- (1)Plaintext communication, and (2)No authentication required. When FINS messages are intercepted, the contents may be retrieved. When arbitrary FINS messages are injected, any commands may be executed on, or the system information may be retrieved from, the affected device. Affected products and versions are as follows: SYSMAC CS-series CPU Units, all versions, SYSMAC CJ-series CPU Units, all versions, SYSMAC CP-series CPU Units, all versions, SYSMAC NJ-series CPU Units, all versions, SYSMAC NX1P-series CPU Units, all versions, SYSMAC NX102-series CPU Units, all versions, and SYSMAC NX7 Database Connection CPU Units (Ver.1.16 or later)

The weakness was shared 06/19/2023 as icsa-22-179-02. It is possible to read the advisory at cisa.gov. The identification of this vulnerability is CVE-2023-27396 since 03/15/2023. The technical details are unknown and an exploit is not publicly available.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2023-31172). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• SCADA Software

Vendor

• Omron

Name

• SYSMAC CJ1
• SYSMAC CP1
• SYSMAC CP2
• SYSMAC CS1
• SYSMAC NJ
• SYSMAC NX

Version

• 1.16

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion