CVE-2014-2369 Omron NS Series HMI Cross-Site Request Forgery

Cross-site request forgery CSRF vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-2369

Summary (CVE-2014-2369) CSRF vulnerability in Omron NS series HMI terminals (NS5/NS8/NS10/NS12/NS15; firmware 8.1xx–8.68x) could allow a remote authenticated attacker to hijack a victim’s session. Root cause: inadequate request verification in the web application (CWE-352). CVSSv2 base scores: NV...

CVE-2014-2370

Summary: CVE-2014-2370 is an XSS vulnerability in Omron NS-series HMI terminals (NS5/8/10/12/15) with software versions 8.1xx–8.68x. The root cause is improper neutralization of input during web page generation, allowing remote authenticated users to inject arbitrary script or HTML. Impact (as do...

CVE-2014-2370 Omron NS Series HMI Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to inject arbitrary web script or HTML via crafted data...

CVE-2014-2370: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to inject arbitrary web script or HTML via crafted data...

PT-2014-4658

Name of the Vulnerable Software and Affected Versions Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals versions 8.1xx through 8.68x Description A cross-site scripting XSS issue in the web application allows remote authenticated users to inject arbitrary web script or HTML via crafted data. This...

CVE-2014-2369: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

PT-2014-4657

Name of the Vulnerable Software and Affected Versions Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals versions 8.1xx through 8.68x Description A cross-site request forgery CSRF issue exists in the web application, allowing remote authenticated users to hijack the authentication of unspecified...

Omron NS Series HMI Vulnerabilities

OVERVIEW Researcher Joel Sevilleja Febrer of S2 Grupo has identified multiple vulnerabilities in Omron Corporation’s NS series human-machine interface HMI terminals. Omron Corporation has produced an update that mitigates these vulnerabilities. These vulnerabilities could be exploited remotely...

CVE-2013-2301

The OMRON OpenWnn application before 1.3.6 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem...

Buffer overflow

The OMRON OpenWnn application before 1.3.6 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem...

CVE-2013-2301

The OMRON OpenWnn application before 1.3.6 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem...

CVE-2013-2301

The CVE-2013-2301 entry concerns OMRON OpenWnn for Android, affected in versions prior to 1.3.6. The underlying issue is weak permissions on unspecified files, enabling information disclosure when a malicious Android application interacts with the local filesystem. The core impact is partial conf...

PT-2013-3645

Name of the Vulnerable Software and Affected Versions OMRON OpenWnn application versions prior to 1.3.6 Description The issue allows attackers to obtain sensitive information by accessing the local filesystem due to weak permissions for unspecified files. Recommendations For versions prior to...

JVN#01167429: OpenWnn for Android vulnerable to information disclosure

OpenWnn provided by OMRON SOFTWARE Co., Ltd. is a Japanese Input Method Editor IME. OpenWnn for Android contains an issue in the access permissions for certain files. Impact If a user of the affected product uses other malicious Android application, information managed by the affected product may...

CVE-2013-2301: Undefined Security Weakness

The OMRON OpenWnn application before 1.3.6 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem...

CVE-2000-0704

Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JSOPEN, JSMKDIR, or JSFILEINFO commands...

CVE-2000-0704

CVE-2000-0704 affects SGI WorldView (Omron Wnn) on IRIX. A root-level buffer overflow in the WorldView WNN server can be triggered remotely by sending oversized JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands, allowing arbitrary commands execution with root privileges on vulnerable installations wher...

CVE-2000-0704

Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JSOPEN, JSMKDIR, or JSFILEINFO commands...

CVE-2000-0704: Undefined Security Weakness

Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JSOPEN, JSMKDIR, or JSFILEINFO commands...