HIGH🇵🇱 Wersja polska

CVE-2022-33208

CVSS 8.1v3.1pub. 2022-07-04upd. 2024-11-21

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who can analyze the communication between the affected controller and automation software 'Sysmac Studio' and/or a Programmable Terminal (PT) to access the controller.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Omron Nj101 1000

    HW
    Omron
    all versions

  • Omron Nj101 1000 Firmware

    OS
    Omron
    ≤ 1.48

  • Omron Nj101 1020

    HW
    Omron
    all versions

  • Omron Nj101 1020 Firmware

    OS
    Omron
    ≤ 1.48

  • Omron Nj101 9000

    HW
    Omron
    all versions

  • Omron Nj101 9000 Firmware

    OS
    Omron
    ≤ 1.48

  • Omron Nj101 9020

    HW
    Omron
    all versions

  • Omron Nj101 9020 Firmware

    OS
    Omron
    ≤ 1.48

  • Omron Nj301 1100

    HW
    Omron
    all versions

  • Omron Nj301 1100 Firmware

    OS
    Omron
    ≤ 1.48

  • Omron Nj301 1200

    HW
    Omron
    all versions

  • Omron Nj301 1200 Firmware

    OS
    Omron
    < 1.48

  • Omron Nj501 1300

    HW
    Omron
    all versions

  • Omron Nj501 1300 Firmware

    OS
    Omron
    ≤ 1.48

  • Omron Nj501 1320

    HW
    Omron
    all versions

  • Omron Nj501 1320 Firmware

    OS
    Omron
    ≤ 1.48

  • Omron Nj501 1340

    HW
    Omron
    all versions

  • Omron Nj501 1340 Firmware

    OS
    Omron
    ≤ 1.48

  • Omron Nj501 140

    HW
    Omron
    all versions

  • Omron Nj501 140 Firmware

    OS
    Omron
    ≤ 1.48

  • Omron Nj501 1420

    HW
    Omron
    all versions

  • Omron Nj501 1420 Firmware

    OS
    Omron
    ≤ 1.48

  • Omron Nj501 1500

    HW
    Omron
    all versions

  • Omron Nj501 1500 Firmware

    OS
    Omron
    ≤ 1.48

  • Omron Nj501 1520

    HW
    Omron
    all versions

  • Omron Nj501 1520 Firmware

    OS
    Omron
    ≤ 1.48

  • Omron Nj501 4300

    HW
    Omron
    all versions

  • Omron Nj501 4300 Firmware

    OS
    Omron
    ≤ 1.48

  • Omron Nj501 4310

    HW
    Omron
    all versions

  • Omron Nj501 4310 Firmware

    OS
    Omron
    ≤ 1.48
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2022-31206CRITICAL9.8PL ✓same product

Brak uwierzytelniania kryptograficznego w sterownikach PLC Omron SYSMAC Nx

CVE-2024-33687HIGH7.5same product

Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series C...

CVE-2022-33971HIGH7.5same product

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all m...

CVE-2022-34151HIGH8.1same product

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.4...

CVE-2023-27396CRITICAL9.8PL ✓same vendor

OMRON FINS Protocol — brak uwierzytelnienia i komunikacja jawnym tekstem