CVE-2022-34151

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac...

Authentication flaw

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow ...

Hardcoded credentials

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac...

CVE-2022-34151

Omron machine automation controllers and software are susceptible to a use of hard-coded credentials (CWE-798) vulnerability. Specifically, the NJ-series (v1.48 and earlier), NX7-series (v1.28 and earlier), NX1-series (v1.48 and earlier), Sysmac Studio software (v1.49 and earlier), and PT NA-seri...

CVE-2022-34151

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac...

CVE-2022-33971

CVE-2022-33971 affects Omron NJ/NX-series Machine Automation Controllers. An adjacent attacker who can analyze the communication between the controller and internal software may bypass authentication via capture-replay, potentially causing a DoS or enabling execution of a malicious program. Affec...

CVE-2022-33208

CVE-2022-33208 is an authentication bypass by capture-replay affecting Omron NJ/NX-series Machine Automation Controllers (NJ 1.48 and earlier; NX7 1.28 and earlier; NX1 1.48 and earlier), Sysmac Studio (≤1.49), and NA-series PT runtimes (NA5-15W/12W/9W/7W ≤1.15). A remote attacker who can analyze...

CVE-2022-33208

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software...

CVE-2022-34151: Use of Hard-coded Credentials

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac...

CVE-2022-33971: Authentication Bypass by Capture-replay

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow ...

CVE-2022-33208: Authentication Bypass by Capture-replay

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software...

USN-5499-1: curl vulnerabilities

Florian Kohnhuser discovered that curl incorrectly handled returning a TLS server’s certificate chain details. A remote attacker could possibly use this issue to cause curl to stop responding, resulting in a denial of service. CVE-2022-27781 Harry Sintonen discovered that curl incorrectly handled...

CVE-2022-23719

PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests. An attacker with the ability to execute code on the target machine maybe able to exploit and spoof the local Java service using multiple attack vectors. A...

PT-2022-32284

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to a missing of node put in the mt2701 wm8960 machine probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-32189

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a missing of node put in the mt2701 wm8960 machine probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-31908

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to a missing of node put in the mt2701 wm8960 machine probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-32063

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to a missing of node put in the mt2701 wm8960 machine probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31697

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a missing of node put in the mt2701 wm8960 machine probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions pri...

PT-2022-31411

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to a missing of node put in the mt2701 wm8960 machine probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For versions pri...

PT-2022-31074

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to a missing of node put in the mt2701 wm8960 machine probe function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...