Omron vulnerabilities | LiveThreat CVE Feed

CVE	Product	CVSS	EPSS	Published	Summary
CVE-2024-33687	NF Nj101-1000 Firmware Omron	7.5	0%	Jun 24	Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions
CVE-2022-45792	SS Sysmac Studio Omron	7.8	0%	Jan 22	Project files may contain malicious contents which the software will use to create files on the filesystem
CVE-2022-45790	CF Cj1g-cpu45p Firmware Omron	9.1	1%	Jan 22	The Omron FINS protocol has an authenticated feature to prevent access to memory regions
CVE-2022-45794	SC Sysmac Cj2h-cpu64-eip Firmware Omron	7.5	1%	Jan 10	An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC internal memory and…
CVE-2022-45793	AS Automation Software Sysmac Studio Omron	7.8	0%	Jan 10	Sysmac Studio installs executables in a directory with poor permissions
CVE-2023-22277	CX Cx-programmer Omron	7.8	0%	Aug 3	Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier
CVE-2023-22317	CX Cx-programmer Omron	7.8	0%	Aug 3	Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier
CVE-2023-22314	CX Cx-programmer Omron	7.8	0%	Aug 3	Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier
CVE-2023-38748	CX Cx-programmer Omron	7.8	0%	Aug 3	Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier
CVE-2023-38747	CX Cx-programmer Omron	7.8	0%	Aug 3	Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier
CVE-2023-38746	CX Cx-programmer Omron	7.8	0%	Aug 3	Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier
CVE-2023-38744	CF Cs1w-eip21 Firmware Omron	7.5	1%	Aug 3	Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the…
CVE-2023-27396	CF Cp2e-n60dr-d Firmware Omron	9.8	1%	Jun 19	FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks…
CVE-2023-27385	CX Cx-drive Omron	7.8	0%	May 10	Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions
CVE-2023-0811	SC Sysmac Cp1e-e10dr-a Firmware Omron	9.1	1%	Mar 16	Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored
CVE-2023-22322	CP Cx-motion Pro Omron	5.5	0%	Jan 30	Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier
CVE-2023-22366	CF Cx-motion-mch Firmware Omron	7.8	0%	Jan 17	CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability
CVE-2023-22357	CF Cp1l-el20dr-d Firmware Omron	9.8	1%	Jan 17	Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication
CVE-2022-46282	CX Cx-drive Omron	7.8	0%	Dec 21	Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,
CVE-2022-43667	CX Cx-programmer Omron	7.8	0%	Dec 7	Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to…
CVE-2022-43509	CX Cx-programmer Omron	7.8	0%	Dec 7	Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a…
CVE-2022-43508	CX Cx-programmer Omron	7.8	0%	Dec 7	Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a…
CVE-2022-3396	CX CX-Programmer OMRON	9.8	1%	Oct 6	OMRON CX-Programmer Out-of-bounds Write
CVE-2022-3398	CX CX-Programmer OMRON	9.8	1%	Oct 6	OMRON CX-Programmer Out-of-bounds Write
CVE-2022-3397	CX CX-Programmer OMRON	9.8	1%	Oct 6	OMRON CX-Programmer Out-of-bounds Write
CVE-2022-2979	CX Cx-programmer Omron	7.8	0%	Sep 12	Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution
CVE-2022-31207	SC Sysmac Cp1l Firmware Omron	9.8	1%	Jul 26	The Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18 lack cryptographic authentication
CVE-2022-31206	NF Nj501-1400 Firmware Omron	9.8	1%	Jul 26	The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication
CVE-2022-31205	SC Sysmac Cj2m Firmware Omron	7.5	1%	Jul 26	In Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to the Web UI is stored in memory area D1449...D1452 and can be read out using the…
CVE-2022-31204	SC Sysmac Cj2h Firmware Omron	7.5	1%	Jul 26	Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords
CVE-2022-34151	NF Nj501-5300 Firmware Omron	8.1	1%	Jul 4	Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models…
CVE-2022-33971	NF Nj101-1000 Firmware Omron	7.5	1%	Jul 4	Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all…
CVE-2022-33208	NF Nj501-r420 Firmware Omron	8.1	2%	Jul 4	Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all…
CVE-2022-26419	CX Cx-position Omron	7.8	2%	Apr 1	Omron CX-Position (versions 2.5.3 and prior) is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to…
CVE-2022-26417	CX Cx-position Omron	7.8	2%	Apr 1	Omron CX-Position (versions 2.5.3 and prior) is vulnerable to a use after free memory condition while processing a specific project file, which may allow an attacker to execute…
CVE-2022-26022	CX Cx-position Omron	7.8	2%	Apr 1	Omron CX-Position (versions 2.5.3 and prior) is vulnerable to an out-of-bounds write while processing a specific project file, which may allow an attacker to execute arbitrary…
CVE-2022-25959	CX Cx-position Omron	7.8	1%	Apr 1	Omron CX-Position (versions 2.5.3 and prior) is vulnerable to memory corruption while processing a specific project file, which may allow an attacker to execute arbitrary code
CVE-2022-25325	CX Cx-programmer Omron	7.8	1%	Mar 10	Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code…
CVE-2022-25234	CX Cx-programmer Omron	7.8	1%	Mar 10	Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary…
CVE-2022-25230	CX Cx-programmer Omron	7.8	1%	Mar 10	Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code…
CVE-2022-21219	CX Cx-programmer Omron	7.8	1%	Mar 10	Out-of-bounds read vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary…
CVE-2022-21124	CX Cx-programmer Omron	7.8	2%	Mar 10	Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary…
CVE-2022-21137	CX Cx-one Omron	7.8	9%	Jan 14	Omron CX-One Versions 4.60 and prior are vulnerable to a stack-based buffer overflow while processing specific project files, which may allow an attacker to execute arbitrary code
CVE-2021-20836	CX Cx-supervisor Omron	6.5	1%	Oct 19	Out-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with administrative privileges to cause information disclosure and/or arbitrary code…
CVE-2021-27413	CX Cx-server Omron	7.8	10%	May 13	Omron CX-One Versions 4.60 and prior, including CX-Server Versions 5.0.29.0 and prior, are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute…
CVE-2020-27261	CX Cx-one Omron	8.8	8%	Feb 9	The Omron CX-One Version 4.60 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code
CVE-2020-27259	CX Cx-one Omron	8.8	3%	Feb 9	The Omron CX-One Version 4.60 and prior may allow an attacker to supply a pointer to arbitrary memory locations, which may allow an attacker to remotely execute arbitrary code
CVE-2020-27257	CX Cx-one Omron	7.8	2%	Feb 9	This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in…
CVE-2020-6986	PC Plc Cj1 Firmware Omron	7.5	2%	Mar 5	In all versions of Omron PLC CJ Series, an attacker can send a series of specific data packets within a short period, causing a service error on the PLC Ethernet module, which in…
CVE-2019-18269	PC Plc CS Firmware Omron	9.8	1%	Dec 16	Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability
CVE-2019-18261	PC Plc CJ Firmware Omron	9.8	1%	Dec 16	In Omron PLC CS series, all versions, Omron PLC CJ series, all versions, and Omron PLC NJ series, all versions, the software does not implement sufficient measures to prevent…
CVE-2019-18259	PC Plc CS Firmware Omron	9.8	2%	Dec 16	In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary messages or execute commands
CVE-2019-13533	PC Plc CJ Firmware Omron	8.1	1%	Dec 16	In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and replay requests that could…
CVE-2019-18251	CX Cx-supervisor Omron	8.8	2%	Nov 26	In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS
CVE-2019-10971	NC Network Configurator For Devicenet Safety Omron	7.8	1%	Jun 12	The application (Network Configurator for DeviceNet Safety 3.41 and prior) searches for resources by means of an untrusted search path that could execute a malicious .dll file not…
CVE-2019-6556	CC Common Components Omron	6.6	1%	Apr 10	When processing project files, the application (Omron CX-Programmer v9.70 and prior and Common Components January 2019 and prior) fails to check if it is referencing freed memory
CVE-2018-16207	PP Poweract Pro Master Agent Omron	6.5	1%	Mar 27	PowerAct Pro Master Agent for Windows Version 5.13 and earlier allows authenticated attackers to bypass access restriction to alter or edit unauthorized files via unspecified…
CVE-2018-19020	CX Cx-supervisor Omron	5.0	1%	Feb 12	When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the application to read a value outside of an…
CVE-2018-19018	CX Cx-supervisor Omron	7.3	1%	Feb 12	An access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could lead to type confusion when processing project files
CVE-2018-19027	CW CX-Protocol within CX-One Omron	7.8	1%	Jan 30	Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files