CVE-2023-38744

Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product receives a packet which is specially crafted by a remote unauthenticated attacker, the unit of the affected product may fall into a denial-of-service (DoS) condition. Affected products/versions are as follows: CJ2M CPU Unit CJ2M-CPU3[] Unit version of the built-in EtherNet/IP section Ver. 2.18 and earlier, CJ2H CPU Unit CJ2H-CPU6[]-EIP Unit version of the built-in EtherNet/IP section Ver. 3.04 and earlier, CS/CJ Series EtherNet/IP Unit CS1W-EIP21 V3.04 and earlier, and CS/CJ Series EtherNet/IP Unit CJ1W-EIP21 V3.04 and earlier.

• CWE-1284

• https://jvn.jp/en/vu/JVNVU92193064/Third Party Advisory
• https://www.ia.omron.com/product/vulnerability/OMSR-2023-006_en.pdfVendor Advisory
• https://jvn.jp/en/vu/JVNVU92193064/Third Party Advisory
• https://www.ia.omron.com/product/vulnerability/OMSR-2023-006_en.pdfVendor Advisory

Published

Aug 3, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-38738 IBM OpenPages with Watson 8.3 and 9.0 could provide weaker …8.1
• CVE-2023-38739IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.…8.8
• CVE-2023-3874A vulnerability, which was classified as critical, was found…7.5
• CVE-2023-38740IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect S…7.5
• CVE-2023-38741 IBM TXSeries for Multiplatforms 8.1, 8.2, and 9.1 is vulner…7.5
• CVE-2023-38743Zoho ManageEngine ADManager Plus before Build 7200 allows ad…7.2
• CVE-2023-38745Pandoc before 3.1.6 allows arbitrary file write: this can be…6.3
• CVE-2023-38746Out-of-bounds read vulnerability/issue exists in CX-Programm…7.8
• CVE-2023-38747Heap-based buffer overflow vulnerability exists in CX-Progra…7.8
• CVE-2023-38748Use after free vulnerability exists in CX-Programmer Include…7.8
• CVE-2023-3875A vulnerability has been found in Campcodes Beauty Salon Man…7.5
• CVE-2023-38750In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 be…7.5