Skip to content
OpenAdvisories

Vendor

Omron

61 known vulnerabilities.

Products

CX-Programmer 19 CX-Position 7 CX-Supervisor 4 CX-One 4 Machine Automation Controller NJ-series 3 Machine Automation Controller NX-series 3 Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series 3 CX-Protocol 3 CX-Server 3 CJ-series and CS-series CPU modules 2 Sysmac Studio 2 NS15 2 NS12 2 NS10 2 NS8 2 NS5 2 CX-Motion Pro 1 CJ1M SYSMAC CJ-series 1 CJ1M SYSMAC CS-series 1 CX-Protocol within CX-One 1 CJ1M SYSMAC CP-series 1 CX-Designer 1 CX-Motion-MCH 1 CX-One CX-One CXONE-AL[][]D-V4 1 Sysmac Studio SYSMAC-SE2[][][] 1 OMRON CX-Supervisor 1 Multiple OMRON products which implement FINS protocol 1 CX-Programmer within CX-One 1 CX-Drive All models 1 Sysmac Studio Software 1 FA Integrated Tool Package CX-One 1 CJ2M CPU Unit 1 CJ2H CPU Unit 1 CS/CJ Series EtherNet/IP Unit 1 CX-Drive 1 SYSMAC-SE2[][][] 1 NJ Series CPU Unit 1 NX Series CPU Unit 1 Programable Terminals NB-Designer 1 Omron PLC CJ Series 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.6
    CVE-2024-12083

    Path Traversal Vulnerabilities in NJ/NX-series Machine Automation Controllers

    Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers. An attacker may use these vulnerabilities to perform unauthorized access and to execute unauthorized code remotely to the controller products.

    Omron Machine Automation Controller NX-series Machine Automation Controller NJ-series ICS / OT
  • Medium 5.5
    CVE-2024-12298

    Vulnerability Report on Improper Restriction of XML External Entity Reference in NB-Designer

    We found a vulnerability Improper Restriction of XML External Entity Reference (CWE-611) in NB-series NX-Designer. Attackers may be able to abuse this vulnerability to disclose confidential data on a computer.

    Omron Programable Terminals NB-Designer ICS / OT
  • Medium 5.7
    CVE-2024-49501

    Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability. If this vulnerability is…

    Omron SYSMAC-SE2[][][] ICS / OT
  • Medium 5.9
    CVE-2024-31413

    Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-AL[][]D-V4 (The version which was in…

    Omron Sysmac Studio SYSMAC-SE2[][][] CX-One CX-One CXONE-AL[][]D-V4 ICS / OT
  • Medium 5.5
    CVE-2022-45793

    Executable files writable by low-privileged users in Omron Sysmac Studio

    Sysmac Studio installs executables in a directory with poor permissions. This can allow a locally-authenticated attacker to overwrite files which will result in code execution with privileges of a different user.

    Omron Sysmac Studio ICS / OT
  • Medium 5.5
    CVE-2023-22322

    Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and e…

    Omron CX-Motion Pro ICS / OT
  • Medium 4.6
    CVE-2014-2369

    Omron NS Series HMI Cross-Site Request Forgery

    Cross-site request forgery (CSRF) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

    Omron NS15 NS10 NS5 ICS / OT
  • Medium 4.0
    CVE-2014-2370

    Omron NS Series HMI Improper Neutralization of Input During Web Page Generation

    Cross-site scripting (XSS) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to inject arbitrary web script or HTML via crafted data.

    Omron NS15 NS10 NS5 ICS / OT