OC
Vendor
OMRON Corporation
37
CVEs
0
On KEV
0
New 30D
Products
CX7.8
CX-Programmer
OMRON Corporation
10 CVEs0 on KEV0 new
MA7.2
Machine Automation Controller NJ-series
OMRON Corporation
3 CVEs0 on KEV0 new
MA8.1
Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series
OMRON Corporation
3 CVEs0 on KEV0 new
MA7.2
Machine Automation Controller NX-series
OMRON Corporation
3 CVEs0 on KEV0 new
CC7.5
CJ2H CPU Unit
OMRON Corporation
1 CVEs0 on KEV0 new
CC7.5
CJ2M CPU Unit
OMRON Corporation
1 CVEs0 on KEV0 new
CP9.8
CP1L-EL20DR-D
OMRON Corporation
1 CVEs0 on KEV0 new
CS7.5
CS/CJ Series EtherNet/IP Unit
OMRON Corporation
1 CVEs0 on KEV0 new
CX5.5
CX-Designer
OMRON Corporation
1 CVEs0 on KEV0 new
CX7.8
CX-Drive
OMRON Corporation
1 CVEs0 on KEV0 new
CA7.8
CX-Drive All models
OMRON Corporation
1 CVEs0 on KEV0 new
CX7.8
CX-Motion-MCH
OMRON Corporation
1 CVEs0 on KEV0 new
CP5.5
CX-Motion Pro
OMRON Corporation
1 CVEs0 on KEV0 new
CC5.9
CX-One CX-One CXONE-AL[][]D-V4
OMRON Corporation
1 CVEs0 on KEV0 new
FI7.8
FA Integrated Tool Package CX-One
OMRON Corporation
1 CVEs0 on KEV0 new
MO9.8
Multiple OMRON products which implement FINS protocol
OMRON Corporation
1 CVEs0 on KEV0 new
NS7.5
NJ Series CPU Unit
OMRON Corporation
1 CVEs0 on KEV0 new
NS7.5
NX Series CPU Unit
OMRON Corporation
1 CVEs0 on KEV0 new
PT5.5
Programable Terminals NB-Designer
OMRON Corporation
1 CVEs0 on KEV0 new
SY5.7
SYSMAC-SE2[][][]
OMRON Corporation
1 CVEs0 on KEV0 new
SS7.0
Sysmac Studio Software
OMRON Corporation
1 CVEs0 on KEV0 new
SS5.9
Sysmac Studio SYSMAC-SE2[][][]
OMRON Corporation
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-1384 | SS Sysmac Studio Software OMRON Corporation | 7.0 | Jul 13 | Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers |
| CVE-2025-0591 | FI FA Integrated Tool Package CX-One OMRON Corporation | 7.8 | Feb 16 | Out-of-bounds Read vulnerability in CX-Programmer |
| CVE-2024-12083 | MA Machine Automation Controller NJ-series OMRON Corporation | 6.6 | Jan 14 | Path Traversal Vulnerabilities in NJ/NX-series Machine Automation Controllers |
| CVE-2024-12298 | PT Programable Terminals NB-Designer OMRON Corporation | 5.5 | Jan 14 | Vulnerability Report on Improper Restriction of XML External Entity Reference in NB-Designer |
| CVE-2024-49501 | SY SYSMAC-SE2[][][] OMRON Corporation | 5.7 | Nov 1 | Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability |
| CVE-2024-33687 | NS NX Series CPU Unit OMRON Corporation | 7.5 | Jun 24 | Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions |
| CVE-2024-31413 | CC CX-One CX-One CXONE-AL[][]D-V4 OMRON Corporation | 5.9 | May 1 | Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-AL[][]D-V4 (The version which was installed with a DVD ver |
| CVE-2024-31412 | CX CX-Programmer OMRON Corporation | 7.8 | May 1 | Out-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-AL[][]D-V4 Ver |
| CVE-2024-27121 | MA Machine Automation Controller NJ Series OMRON Corporation | 7.2 | Mar 12 | Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Series |
| CVE-2023-43624 | CX CX-Designer OMRON Corporation | 5.5 | Oct 23 | CX-Designer Ver.3.740 and earlier (included in CX-One CXONE-AL[][]D-V4) contains an improper restriction of XML external entity reference (XXE) vulnerability |
| CVE-2023-22277 | CX CX-Programmer OMRON Corporation | 7.8 | Aug 3 | Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier |
| CVE-2023-22314 | CX CX-Programmer OMRON Corporation | 7.8 | Aug 3 | Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier |
| CVE-2023-22317 | CX CX-Programmer OMRON Corporation | 7.8 | Aug 3 | Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier |
| CVE-2023-38748 | CX CX-Programmer OMRON Corporation | 7.8 | Aug 3 | Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier |
| CVE-2023-38747 | CX CX-Programmer OMRON Corporation | 7.8 | Aug 3 | Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier |
| CVE-2023-38746 | CX CX-Programmer OMRON Corporation | 7.8 | Aug 3 | Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier |
| CVE-2023-38744 | CC CJ2M CPU Unit OMRON Corporation | 7.5 | Aug 3 | Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the… |
| CVE-2023-27396 | MO Multiple OMRON products which implement FINS protocol OMRON Corporation | 9.8 | Jun 19 | FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks… |
| CVE-2023-27385 | CA CX-Drive All models OMRON Corporation | 7.8 | May 10 | Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions |
| CVE-2023-22322 | CP CX-Motion Pro OMRON Corporation | 5.5 | Jan 30 | Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier |
| CVE-2023-22357 | CP CP1L-EL20DR-D OMRON Corporation | 9.8 | Jan 17 | Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication |
| CVE-2023-22366 | CX CX-Motion-MCH OMRON Corporation | 7.8 | Jan 17 | CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability |
| CVE-2022-46282 | CX CX-Drive OMRON Corporation | 7.8 | Dec 21 | Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file, |
| CVE-2022-43508 | CX CX-Programmer OMRON Corporation | 7.8 | Dec 7 | Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a… |
| CVE-2022-43667 | CX CX-Programmer OMRON Corporation | 7.8 | Dec 7 | Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to… |
| CVE-2022-43509 | CX CX-Programmer OMRON Corporation | 7.8 | Dec 7 | Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a… |
| CVE-2022-34151 | MA Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series OMRON Corporation | 8.1 | Jul 4 | Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models… |
| CVE-2022-33971 | MA Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series OMRON Corporation | 7.5 | Jul 4 | Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all… |
| CVE-2022-33208 | MA Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series OMRON Corporation | 8.1 | Jul 4 | Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all… |
