Detections
Analytics

Omron NJ Series CPU Unit Insufficient Verification of Data Authenticity (CVE-2024-33687)

high Tenable OT Security Plugin ID 502295

Synopsis

The remote OT asset is affected by a vulnerability.

Description

Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product may not be able to detect the alteration.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Solution

Refer to the vendor advisory.

See Also

https://jvn.jp/en/vu/JVNVU92504444/

http://www.nessus.org/u?b2a95695

Plugin Details

Severity: High

ID: 502295

Version: 1.2

Type: remote

Family: Tenable.ot

Published: 7/11/2024

Updated: 7/12/2024

Supported Sensors: Tenable OT Security

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:N

CVSS Score Source: CVE-2024-33687

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:omron:nj101-9020_firmware, cpe:/o:omron:nj501-4400_firmware, cpe:/o:omron:nj301-1100_firmware, cpe:/o:omron:nj501-4310_firmware, cpe:/o:omron:nj501-r400_firmware, cpe:/o:omron:nj501-1500_firmware, cpe:/o:omron:nx102-1200_firmware, cpe:/o:omron:nx701-1700_firmware, cpe:/o:omron:nj501-r320_firmware, cpe:/o:omron:nx102-1020_firmware, cpe:/o:omron:nj501-1520_firmware, cpe:/o:omron:nx701-z600_firmware, cpe:/o:omron:nx701-1620_firmware, cpe:/o:omron:nj101-1020_firmware, cpe:/o:omron:nj501-r520_firmware, cpe:/o:omron:nx102-9000_firmware, cpe:/o:omron:nj501-1320_firmware, cpe:/o:omron:nx701-1720_firmware, cpe:/o:omron:nj501-4320_firmware, cpe:/o:omron:nj501-1340_firmware, cpe:/o:omron:nx701-z700_firmware, cpe:/o:omron:nj501-5300-1_firmware, cpe:/o:omron:nx701-1600_firmware, cpe:/o:omron:nj501-4500_firmware, cpe:/o:omron:nx102-1120_firmware, cpe:/o:omron:nj501-5300_firmware, cpe:/o:omron:nx102-1100_firmware, cpe:/o:omron:nj101-9000_firmware, cpe:/o:omron:nj501-1300_firmware, cpe:/o:omron:nj501-r300_firmware, cpe:/o:omron:nj501-1400_firmware, cpe:/o:omron:nj501-r500_firmware, cpe:/o:omron:nj501-140_firmware, cpe:/o:omron:nj501-1420_firmware, cpe:/o:omron:nj501-r420_firmware, cpe:/o:omron:nj501-4300_firmware, cpe:/o:omron:nx102-9020_firmware, cpe:/o:omron:nx102-1220_firmware, cpe:/o:omron:nj301-1200_firmware, cpe:/o:omron:nx102-1000_firmware, cpe:/o:omron:nj101-1000_firmware

Required KB Items: Tenable.ot/Omron

Exploit Ease: No known exploits are available

Patch Publication Date: 6/24/2024

Vulnerability Publication Date: 6/24/2024

Reference Information

CVE: CVE-2024-33687

CWE: 345