Vulnerability index

Browse CVEs

83 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Nj101 1000 Firmware HIGH 7.5
CVE-2024-33687

Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program…

No fix yet
Fix from $1,950 2024-06-24
Cj1g Cpu45p Firmware CRITICAL 9.1
CVE-2022-45790

The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which m…

Fix: 1.3 / 1.5+
Fix from $2,300 2024-01-22
Sysmac Studio HIGH 7.8
CVE-2022-45792

Project files may contain malicious contents which the software will use to create files on the filesystem. This allows directory traversal and overw…

Fix: 1.54.0+
Fix from $1,950 2024-01-22
Sysmac Cj2h Cpu64 Eip Firmware HIGH 7.5
CVE-2022-45794

An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files o…

Mitigation only
Fix from $1,950 2024-01-10
Automation Software Sysmac Studio HIGH 7.8
CVE-2022-45793

Sysmac Studio installs executables in a directory with poor permissions. This can allow a locally-authenticated attacker to overwrite files which wil…

Fix: after 1.54
Fix from $1,950 2024-01-10
Cx Programmer HIGH 7.8
CVE-2023-22277

Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure…

Fix: after 9.79
Fix from $1,950 2023-08-03
Cx Programmer HIGH 7.8
CVE-2023-22314

Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure…

Fix: after 9.79
Fix from $1,950 2023-08-03
Cx Programmer HIGH 7.8
CVE-2023-22317

Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure…

Fix: after 9.79
Fix from $1,950 2023-08-03
Cx Programmer HIGH 7.8
CVE-2023-38747

Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a speci…

Fix: after 9.80
Fix from $1,950 2023-08-03
Cx Programmer HIGH 7.8
CVE-2023-38748

Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted…

Fix: after 9.80
Fix from $1,950 2023-08-03
Cx Programmer HIGH 7.8
CVE-2023-38746

Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a special…

Fix: after 9.80
Fix from $1,950 2023-08-03
Cj2m Cpu35 Firmware HIGH 7.5
CVE-2023-38744

Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ S…

Fix: after 3.04
Fix from $1,950 2023-08-03
Cs1w Eip21 Firmware CRITICAL 9.8
CVE-2023-27396

FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks…

Mitigation only
Fix from $2,300 2023-06-19
Cx Drive HIGH 7.8
CVE-2023-27385

Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. By having a user open a specially crafted SDD file, arbitrary co…

Fix: after 3.01
Fix from $1,950 2023-05-10
Sysmac Cj2h Cpu64 Firmware CRITICAL 9.1
CVE-2023-0811

Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AR…

Mitigation only
Fix from $2,300 2023-03-16
Cx Motion Pro MEDIUM 5.5
CVE-2023-22322

Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a spec…

Fix: 1.4.6.014+
Fix from $1,600 2023-01-30
Cp1l El20dr D Firmware CRITICAL 9.8
CVE-2023-22357

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed witho…

Mitigation only
Fix from $2,300 2023-01-17
Cx Motion Mch Firmware HIGH 7.8
CVE-2023-22366

CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted project file may…

Fix: 2.33+
Fix from $1,950 2023-01-17
Cx Drive HIGH 7.8
CVE-2022-46282

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially cra…

Fix: after 3.00
Fix from $1,950 2022-12-21
Cx Programmer HIGH 7.8
CVE-2022-43508

Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by …

Fix: after 9.77
Fix from $1,950 2022-12-07
Cx Programmer HIGH 7.8
CVE-2022-43509

Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code executio…

Fix: after 9.77
Fix from $1,950 2022-12-07
Cx Programmer HIGH 7.8
CVE-2022-43667

Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code …

Fix: after 9.77
Fix from $1,950 2022-12-07
Cx Programmer CRITICAL 9.8
CVE-2022-3397

OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.

Fix: after 9.78
Fix from $2,300 2022-10-06
Cx Programmer CRITICAL 9.8
CVE-2022-3398

OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.

Fix: after 9.78
Fix from $2,300 2022-10-06
Cx Programmer CRITICAL 9.8
CVE-2022-3396

OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.

Fix: after 9.78
Fix from $2,300 2022-10-06
Cx Programmer HIGH 7.8
CVE-2022-2979

Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code exe…

Fix: 9.78+
Fix from $1,950 2022-09-12
Nx701 1600 Firmware CRITICAL 9.8
CVE-2022-31206

The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. The…

Fix: 1.29 / 1.49+
Fix from $2,300 2022-07-26
Sysmac Cs1 Firmware CRITICAL 9.8
CVE-2022-31207

The Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18 lack cryptographic authentication. They utilize the …

Fix: 1.5 / 1.10+
Fix from $2,300 2022-07-26
Sysmac Cs1 Firmware HIGH 7.5
CVE-2022-31204

Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or …

Fix: 1.5 / 1.10+
Fix from $1,950 2022-07-26
Sysmac Cs1 Firmware HIGH 7.5
CVE-2022-31205

In Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to the Web UI is stored in memory area D1449...D1452 an…

Fix: 1.5 / 1.10+
Fix from $1,950 2022-07-26