CVE:CVE-2022-31206
CNNVD:CNNVD-202206-2698
Omron SYSMAC CS/CJ/CP Series和Omron SYSMAC NJ/NX Series都是日本Omron公司的产品。Omron SYSMAC CS/CJ/CP Series是一系列可编程控制器。Omron SYSMAC NJ/NX Series是一系列机械自动化控制器。
Omron SYSMAC 多款产品存在数据伪造问题漏洞，该漏洞源于数据真实性验证不足。攻击者利用该漏洞可操纵传输到 PLC 的目标代码，并在 SYSMAC NJ/NX 系列控制器的 PLC CPU 模块的处理器上执行任意机器代码。以下产品和版本受到影响：SYSMAC CS1 4.1 之前版本、SYSMAC CJ2M 2.1 之前版本、SYSMAC CJ2H 1.5 之前版本、SYSMAC CP1E/CP1H 1.30 之前版本、SYSMAC CP1L 1.10 之前版本、CP1W-CIF41 所有版本、SYSMAC CX-Programmer 9.6 之前版本、SYSMAC NJ/NX 系列 1.49 之前版本（NX7 为 1.29）。
solution:Upgrade omron nx701-1600_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade omron nx701-1620_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade omron nx701-1700_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade omron nx701-1720_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade omron nx701-z600_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade omron nx701-z700_firmware to a higher version than 1.29,and avoid the version (,1.29); Upgrade omron nj101-1000_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj101-1020_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj101-9000_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj101-9020_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj301-1100_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj301-1200_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj501-1300_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj501-1320_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj501-1340_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj501-1400_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj501-1420_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj501-1500_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj501-1520_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj501-4300_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj501-4320_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj501-4400_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj501-4500_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj501-5300_firmware to a higher version than 1.49,and avoid the version (,1.49); Upgrade omron nj501-5300-1_firmware to a higher version than 1.49,and avoid the version (,1.49)