Vendor
Omron
61 known vulnerabilities.
Omron at a glance
- Last 12 months
- 0
- Critical · all time
- 4
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 1 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 1 | 0 |
| Jan 2025 | 2 | 0 |
| Dec 2024 | 0 | 0 |
Products
Latest advisories
-
Critical max 10.0first Jul 4, 2015
-
Medium max 4.6first Apr 24, 2014
-
Medium max 5.5ICSA-23-262-03 1 CVE
Omron Engineering Software Zip-Slip
Successful exploitation of this vulnerability could allow an attacker to overwrite files on a system.
-
Medium max 5.5ICSA-23-262-04 1 CVE
Omron Engineering Software
Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code.
-
High max 8.6ICSA-23-262-05 1 CVE
Omron CJ/CS/CP Series
Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information in memory.
61 results · Feed
-
High 7.0
Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers
Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and to execute…
-
High 7.8
Out-of-bounds Read vulnerability in CX-Programmer
Out-of-bounds Read vulnerability (CWE-125) was found in CX-Programmer. Attackers may be able to read sensitive information or cause an application crash by abusing this vulnerability.
-
Medium 6.6
Path Traversal Vulnerabilities in NJ/NX-series Machine Automation Controllers
Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers. An attacker may use these vulnerabilities to perform unauthorized access and to execute unauthorized code remotely to the controller products.
-
Medium 5.5
Vulnerability Report on Improper Restriction of XML External Entity Reference in NB-Designer
We found a vulnerability Improper Restriction of XML External Entity Reference (CWE-611) in NB-series NX-Designer. Attackers may be able to abuse this vulnerability to disclose confidential data on a computer.
-
Medium 5.7
Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability. If this vulnerability is…
-
High 7.5
Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit a…
-
Medium 5.9
Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-AL[][]D-V4 (The version which was in…
-
High 7.8
Out-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-AL[][]D-V4 Ver. 9.81 or lower. Openin…
-
High 7.2
Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Ser…
-
High 7.8
Directory Traversal in Project File Format allows overwrite (Zip Slip)
Project files may contain malicious contents which the software will use to create files on the filesystem. This allows directory traversal and overwriting files with the privileges of the logged-in user.
-
High 8.6
Omron FINS memory protection susceptible to bruteforce
The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected memory. This access can allow overwrite of values including …
-
High 8.6
Omron CJ-series and CS-series unauthenticated filesystem access.
An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC internal memory and memory card.
-
Medium 5.5
Executable files writable by low-privileged users in Omron Sysmac Studio
Sysmac Studio installs executables in a directory with poor permissions. This can allow a locally-authenticated attacker to overwrite files which will result in code execution with privileges of a different user.
-
Unscored —
CX-Designer Ver.3.740 and earlier (included in CX-One CXONE-AL[][]D-V4) contains an improper restriction of XML externa…
-
Unscored —
Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CX…
-
Unscored —
Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CX…
-
Unscored —
Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CX…
-
Unscored —
Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a…
-
Unscored —
Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier.…
-
Unscored —
Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. B…
-
Unscored —
Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-i…
-
Critical 9.8
FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA…
-
High 7.8
Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. By having a user open a specially …
-
Critical 9.1
Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an…
-
Medium 5.5
Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and e…
-
High 7.8
CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a spec…
-
Critical 9.8
Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS…
-
High 7.8
Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having …
-
High 7.8
Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure …
-
High 7.8
Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/o…
-
High 7.8
Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information dis…
-
High 7.8
OMRON CX-Programmer Out-of-bounds Write
OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.
-
High 7.8
OMRON CX-Programmer Out-of-bounds Write
OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.
-
High 7.8
OMRON CX-Programmer Out-of-bounds Write
OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.
-
High 7.8
Omron CX-Programmer
Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution.
-
Critical 9.4
Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and ear…
-
High 8.3
Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.…
-
Unscored —
Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.…
-
High 7.8
Rockwell Automation Studio 5000 Logix Designer Code Injection
Omron CX-Position (versions 2.5.3 and prior) is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to locally execute arbitrary code.
-
High 7.8
Rockwell Automation Studio 5000 Logix Designer Out-of-Bounds Write
Omron CX-Position (versions 2.5.3 and prior) is vulnerable to an out-of-bounds write while processing a specific project file, which may allow an attacker to execute arbitrary code.