CVE:CVE-2022-31207
CNNVD:CNNVD-202206-2700
Omron SYSMAC CS/CJ/CP Series和Omron SYSMAC NJ/NX Series都是日本Omron公司的产品。Omron SYSMAC CS/CJ/CP Series是一系列可编程控制器。Omron SYSMAC NJ/NX Series是一系列机械自动化控制器。
Omron SYSMAC 多款产品存在数据伪造问题漏洞，该漏洞源于数据真实性验证不足。攻击者利用该漏洞可以在所有版本的 SYSMAC CS/CJ/CP 系列控制器的已定义软件逻辑上执行任意目标代码命令，并导致拒绝服务条件。以下产品和版本受到影响：SYSMAC CS1 4.1 之前版本、SYSMAC CJ2M 2.1 之前版本、SYSMAC CJ2H 1.5 之前版本、SYSMAC CP1E/CP1H 1.30 之前版本、SYSMAC CP1L 1.10 之前版本、CP1W-CIF41 所有版本、SYSMAC CX-Programmer 9.6 之前版本、SYSMAC NJ/NX 系列 1.49 之前版本（NX7 为 1.29）。
solution:Upgrade omron sysmac_cs1_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade omron sysmac_cj2m_firmware to a higher version than 2.1,and avoid the version (,2.1); Upgrade omron sysmac_cj2h_firmware to a higher version than 1.5,and avoid the version (,1.5); Upgrade omron sysmac_cp1e_firmware to a higher version than 1.30,and avoid the version (,1.30); Upgrade omron sysmac_cp1h_firmware to a higher version than 1.30,and avoid the version (,1.30); Upgrade omron sysmac_cp1l_firmware to a higher version than 1.10,and avoid the version (,1.10); Upgrade omron cp1w-cif41_firmware to a higher version than -