Browse CVEs

HIGH 8.1 CVE-2022-33208 Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automa… Nx701 1600 Firmware after 1.48 Fix from $1,9502022-07-04 HIGH 8.1 CVE-2022-34151 Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation contr… Nx701 1600 Firmware after 1.48 Fix from $1,9502022-07-04 HIGH 7.5 CVE-2022-33971 Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automa… Nx701 1600 Firmware after 1.48 Fix from $1,9502022-07-04 HIGH 7.8 CVE-2022-25959 Omron CX-Position (versions 2.5.3 and prior) is vulnerable to memory corruption while processing a specific project file, which may allow an attacker… Cx Position after 2.5.3 Fix from $1,9502022-04-01 HIGH 7.8 CVE-2022-26022 Omron CX-Position (versions 2.5.3 and prior) is vulnerable to an out-of-bounds write while processing a specific project file, which may allow an att… Cx Position after 2.5.3 Fix from $1,9502022-04-01 HIGH 7.8 CVE-2022-26417 Omron CX-Position (versions 2.5.3 and prior) is vulnerable to a use after free memory condition while processing a specific project file, which may a… Cx Position after 2.5.3 Fix from $1,9502022-04-01 HIGH 7.8 CVE-2022-26419 Omron CX-Position (versions 2.5.3 and prior) is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, … Cx Position after 2.5.3 Fix from $1,9502022-04-01 HIGH 7.8 CVE-2022-25325 Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information dis… Cx Programmer 9.77+ Fix from $1,9502022-03-10 HIGH 7.8 CVE-2022-25230 Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information dis… Cx Programmer 9.77+ Fix from $1,9502022-03-10 HIGH 7.8 CVE-2022-25234 Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause informatio… Cx Programmer 9.77+ Fix from $1,9502022-03-10 HIGH 7.8 CVE-2022-21219 Out-of-bounds read vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information… Cx Programmer 9.77+ Fix from $1,9502022-03-10 HIGH 7.8 CVE-2022-21124 Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause informatio… Cx Programmer 9.77+ Fix from $1,9502022-03-10 HIGH 7.8 CVE-2022-21137EPSS 9% Omron CX-One Versions 4.60 and prior are vulnerable to a stack-based buffer overflow while processing specific project files, which may allow an atta… Cx One after 4.60 Fix from $1,9502022-01-14 MEDIUM 6.5 CVE-2021-20836 Out-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with administrative privileges to cause information disc… Cx Supervisor Patch available Fix from $1,6002021-10-19 HIGH 7.8 CVE-2021-27413EPSS 10% Omron CX-One Versions 4.60 and prior, including CX-Server Versions 5.0.29.0 and prior, are vulnerable to a stack-based buffer overflow, which may all… Cx One after 5.0.29 Fix from $1,9502021-05-13 HIGH 8.8 CVE-2020-27259 The Omron CX-One Version 4.60 and prior may allow an attacker to supply a pointer to arbitrary memory locations, which may allow an attacker to remot… Cx One after 5.0.28 Fix from $1,9502021-02-09 HIGH 8.8 CVE-2020-27261EPSS 8% The Omron CX-One Version 4.60 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary cod… Cx One after 5.0.28 Fix from $1,9502021-02-09 HIGH 7.8 CVE-2020-27257 This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a… Cx One after 5.0.28 Fix from $1,9502021-02-09 HIGH 7.5 CVE-2020-6986 In all versions of Omron PLC CJ Series, an attacker can send a series of specific data packets within a short period, causing a service error on the … Plc Cj1 Firmware Mitigation only Fix from $1,9502020-03-05 CRITICAL 9.8 CVE-2019-18259 In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary messages or execute commands. Plc Cj Firmware Mitigation only Fix from $2,3002019-12-16 CRITICAL 9.8 CVE-2019-18261 In Omron PLC CS series, all versions, Omron PLC CJ series, all versions, and Omron PLC NJ series, all versions, the software does not implement suffi… Plc Cj Firmware Mitigation only Fix from $2,3002019-12-16 CRITICAL 9.8 CVE-2019-18269 Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability. Plc Cj Firmware Mitigation only Fix from $2,3002019-12-16 HIGH 8.1 CVE-2019-13533 In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and… Plc Cj Firmware Mitigation only Fix from $1,9502019-12-16 HIGH 8.8 CVE-2019-18251 In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vul… Cx Supervisor after 3.5 Fix from $1,9502019-11-26 HIGH 7.8 CVE-2019-10971 The application (Network Configurator for DeviceNet Safety 3.41 and prior) searches for resources by means of an untrusted search path that could exe… Network Configurator For Devicenet Safety after 3.41 Fix from $1,9502019-06-12 MEDIUM 6.6 CVE-2019-6556 When processing project files, the application (Omron CX-Programmer v9.70 and prior and Common Components January 2019 and prior) fails to check if i… Common Components after 2019-01 Fix from $1,6002019-04-10 MEDIUM 6.5 CVE-2018-16207 PowerAct Pro Master Agent for Windows Version 5.13 and earlier allows authenticated attackers to bypass access restriction to alter or edit unauthori… Poweract Pro Master Agent after 5.13 Fix from $1,6002019-03-27 HIGH 7.3 CVE-2018-19018 An access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could lead to type confusion when processing project file… Cx Supervisor after 3.42 Fix from $1,9502019-02-12 MEDIUM 5.0 CVE-2018-19020 When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the application t… Cx Supervisor after 3.42 Fix from $1,6002019-02-12 HIGH 7.8 CVE-2018-19027 Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files. An… Cx One after 4.50 Fix from $1,9502019-01-30