CVE-2022-34151

Omron machine automation controllers and software are susceptible to a use of hard-coded credentials (CWE-798) vulnerability. Specifically, the NJ-series (v1.48 and earlier), NX7-series (v1.28 and earlier), NX1-series (v1.48 and earlier), Sysmac Studio software (v1.49 and earlier), and PT NA-seri...

CVE-2022-33208

CVE-2022-33208 is an authentication bypass by capture-replay affecting Omron NJ/NX-series Machine Automation Controllers (NJ 1.48 and earlier; NX7 1.28 and earlier; NX1 1.48 and earlier), Sysmac Studio (≤1.49), and NA-series PT runtimes (NA5-15W/12W/9W/7W ≤1.15). A remote attacker who can analyze...

CVE-2022-45792

CVE-2022-45792 affects Omron PLCs (CJ/CS/NJ series) and related engineering software. The issue stems from processing project files that may contain malicious contents, enabling directory traversal to create/overwrite files on the host filesystem with the privileges of the logged-in user. CVSS me...