Omron Engineering Software Zip-Slip

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION : Low attack complexity Vendor : Omron Equipment : Sysmac Studio, NX-IO Configurator Vulnerability : Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to overwrite files on a system. 3...

PT-2023-5881 · Omron · Omron Fins Protocol

Name of the Vulnerable Software and Affected Versions: Omron FINS protocol affected versions not specified Description: The issue concerns the Omron FINS protocol's authenticated feature, which is intended to prevent access to memory regions. However, this authentication is susceptible to brute...

PT-2023-5880 · Omron · Omron Sysmac Studio

Name of the Vulnerable Software and Affected Versions: Omron Sysmac Studio affected versions not specified Description: The issue is related to poor permissions in a directory where executables are installed, allowing a locally-authenticated attacker to overwrite files. This can result in code...

Omron CS/CJ Series Denial of Service (CVE-2023-38744)

Denial-of-service DoS vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product receives a packet which is specially...

The vulnerability of Omron CX-Programmer’s software for programming logic controllers lies in the use of memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of Omron CX-Programmer software for programming logic controllers is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted CXP files...

OMRON CJ series and CS/CJ Series EtherNet/IT unit vulnerable to Denial-of-Service (DoS)

Overview Denial-of-service DoS vulnerability due to improper validation of specified type of input CWE-1287 issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit provided by OMRON Corporation. OMRON...

Multiple vulnerabilities in OMRON CX-Programmer

Overview CX-Programmer provided by OMRON Corporation contains multiple vulnerabilities listed below. Out-of-bounds read CWE-125 - CVE-2023-38746 Heap-based buffer overflow CWE-122 - CVE-2023-38747 Use after free CWE-416 - CVE-2023-38748 Michael Heinzl reported these vulnerabilities to JPCERT/CC...

Omron CX-Programmer Resource Management Error Vulnerability

Omron CX-Programmer is a PLC Programmable Logic Controller programming software from Omron, Japan. A security vulnerability exists in CX-Programmer version 9.79 and earlier, which stems from the presence of a post-release reuse vulnerability. An attacker could exploit this vulnerability to allow ...

Omron CX-Programmer Resource Management Error Vulnerability

Omron CX-Programmer is a PLC Programmable Logic Controller programming software from Omron, Japan. A security vulnerability exists in Omron CX-Programmer version 9.79 and earlier, which stems from a post-release reuse vulnerability. The vulnerability can be exploited to allow a user to open a...

Omron CX-Programmer Resource Management Error Vulnerability

Omron CX-Programmer is a PLC Programmable Logic Controller programming software from Omron, Japan. A security vulnerability exists in CX-Programmer version 9.79 and earlier, which stems from the presence of a post-release reuse vulnerability. An attacker can exploit this vulnerability to allow a...

Omron CX-One Resource Management Error Vulnerability

Omron CX-One is an integrated toolkit from Omron Japan. The product includes inverters, temperature controllers, and PLC programming software. A security vulnerability exists in Omron CX-One that stems from the presence of a Use-after-Free vulnerability, which could lead to information disclosure...

Omron CJ Series Security Vulnerability

The Omron CJ series is a series of small programmable controllers from Omron Corporation Japan. A security vulnerability exists in the Omron CJ Series CJ2 CPU unit and the CS/CJ Series EtherNet/IP unit, which results from a lack of proper validation of specified types of inputs...

PT-2023-5305 · Omron · Cx-Programmer

Name of the Vulnerable Software and Affected Versions: CX-Programmer Included in CX-One CXONE-ALD-V4 versions 9.80 and earlier Description: An out-of-bounds read issue exists, which may allow information disclosure and/or arbitrary code execution when a user opens a specially crafted CXP file. Th...

Omron CX-One Buffer Error Vulnerability

Omron CX-One is an integrated toolkit from Omron Japan. The product includes inverters, temperature controllers, and PLC programming software. A security vulnerability exists in Omron CX-One that stems from an out-of-bounds read vulnerability that could lead to information disclosure or arbitrary...

Omron CX-One Buffer Error Vulnerability

Omron CX-One is an integrated toolkit from Omron Japan. The product includes inverters, temperature controllers, and PLC programming software. Omron CX-One has a security vulnerability that originates from the presence of a heap buffer overflow vulnerability. By allowing a user to open a speciall...

PT-2023-5304 · Omron · Cx-Programmer

Name of the Vulnerable Software and Affected Versions: CX-Programmer Included in CX-One CXONE-ALD-V4 versions 9.80 and earlier Description: A heap-based buffer overflow issue exists, which can be exploited by having a user open a specially crafted CXP file. This may lead to information disclosure...

Omron SYSMAC Missing Authentication (CVE-2023-27396)

FINS Factory Interface Network Service is a message communication protocol, which is designed to be used in closed FA Factory Automation networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues --...

CVE-2023-27396

FINS Factory Interface Network Service is a message communication protocol, which is designed to be used in closed FA Factory Automation networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues --...

CVE-2023-27396

FINS Factory Interface Network Service is a message communication protocol, which is designed to be used in closed FA Factory Automation networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues --...

Design/Logic Flaw

FINS Factory Interface Network Service is a message communication protocol, which is designed to be used in closed FA Factory Automation networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues --...