Browse CVEs

HIGH 7.5 CVE-2024-33687 Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program… Nj101 1000 Firmware No fix yet Fix from $1,9502024-06-24 CRITICAL 9.1 CVE-2022-45790 The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which m… Cj1g Cpu45p Firmware 1.3 / 1.5+ Fix from $2,3002024-01-22 HIGH 7.8 CVE-2022-45792 Project files may contain malicious contents which the software will use to create files on the filesystem. This allows directory traversal and overw… Sysmac Studio 1.54.0+ Fix from $1,9502024-01-22 HIGH 7.5 CVE-2022-45794 An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files o… Sysmac Cj2h Cpu64 Eip Firmware Mitigation only Fix from $1,9502024-01-10 HIGH 7.8 CVE-2022-45793 Sysmac Studio installs executables in a directory with poor permissions. This can allow a locally-authenticated attacker to overwrite files which wil… Automation Software Sysmac Studio after 1.54 Fix from $1,9502024-01-10 HIGH 7.8 CVE-2023-22277 Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure… Cx Programmer after 9.79 Fix from $1,9502023-08-03 HIGH 7.8 CVE-2023-22314 Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure… Cx Programmer after 9.79 Fix from $1,9502023-08-03 HIGH 7.8 CVE-2023-22317 Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure… Cx Programmer after 9.79 Fix from $1,9502023-08-03 HIGH 7.8 CVE-2023-38747 Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a speci… Cx Programmer after 9.80 Fix from $1,9502023-08-03 HIGH 7.8 CVE-2023-38748 Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted… Cx Programmer after 9.80 Fix from $1,9502023-08-03 HIGH 7.8 CVE-2023-38746 Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a special… Cx Programmer after 9.80 Fix from $1,9502023-08-03 HIGH 7.5 CVE-2023-38744 Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ S… Cj2m Cpu35 Firmware after 3.04 Fix from $1,9502023-08-03 CRITICAL 9.8 CVE-2023-27396 FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks… Cs1w Eip21 Firmware Mitigation only Fix from $2,3002023-06-19 HIGH 7.8 CVE-2023-27385 Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. By having a user open a specially crafted SDD file, arbitrary co… Cx Drive after 3.01 Fix from $1,9502023-05-10 CRITICAL 9.1 CVE-2023-0811 Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AR… Sysmac Cj2h Cpu64 Firmware Mitigation only Fix from $2,3002023-03-16 MEDIUM 5.5 CVE-2023-22322 Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a spec… Cx Motion Pro 1.4.6.014+ Fix from $1,6002023-01-30 CRITICAL 9.8 CVE-2023-22357 Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed witho… Cp1l El20dr D Firmware Mitigation only Fix from $2,3002023-01-17 HIGH 7.8 CVE-2023-22366 CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted project file may… Cx Motion Mch Firmware 2.33+ Fix from $1,9502023-01-17 HIGH 7.8 CVE-2022-46282 Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially cra… Cx Drive after 3.00 Fix from $1,9502022-12-21 HIGH 7.8 CVE-2022-43508 Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by … Cx Programmer after 9.77 Fix from $1,9502022-12-07 HIGH 7.8 CVE-2022-43509 Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code executio… Cx Programmer after 9.77 Fix from $1,9502022-12-07 HIGH 7.8 CVE-2022-43667 Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code … Cx Programmer after 9.77 Fix from $1,9502022-12-07 CRITICAL 9.8 CVE-2022-3397 OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. Cx Programmer after 9.78 Fix from $2,3002022-10-06 CRITICAL 9.8 CVE-2022-3398 OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. Cx Programmer after 9.78 Fix from $2,3002022-10-06 CRITICAL 9.8 CVE-2022-3396 OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. Cx Programmer after 9.78 Fix from $2,3002022-10-06 HIGH 7.8 CVE-2022-2979 Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code exe… Cx Programmer 9.78+ Fix from $1,9502022-09-12 CRITICAL 9.8 CVE-2022-31206 The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. The… Nx701 1600 Firmware 1.29 / 1.49+ Fix from $2,3002022-07-26 CRITICAL 9.8 CVE-2022-31207 The Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18 lack cryptographic authentication. They utilize the … Sysmac Cs1 Firmware 1.5 / 1.10+ Fix from $2,3002022-07-26 HIGH 7.5 CVE-2022-31204 Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or … Sysmac Cs1 Firmware 1.5 / 1.10+ Fix from $1,9502022-07-26 HIGH 7.5 CVE-2022-31205 In Omron CS series, CJ series, and CP series PLCs through 2022-05-18, the password for access to the Web UI is stored in memory area D1449...D1452 an… Sysmac Cs1 Firmware 1.5 / 1.10+ Fix from $1,9502022-07-26