OMRON Corporation Vulnerabilities and Affected Products

Open in search

Explore source-attributed vulnerabilities associated with OMRON Corporation products.

Products

Showing 25 vulnerabilities on this page

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers

Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and to execute unauthorized code remotely to the controller products.

CWE-272Jul 13, 2025
CVSS7.0v3.1EPSS0.222%PoCs0SignalsSTIX

Out-of-bounds Read vulnerability in CX-Programmer

Out-of-bounds Read vulnerability (CWE-125) was found in CX-Programmer. Attackers may be able to read sensitive information or cause an application crash by abusing this vulnerability.

CWE-125Feb 16, 2025
CVSS7.8v3.1EPSS0.174%PoCs0SignalsSTIX

Path Traversal Vulnerabilities in NJ/NX-series Machine Automation Controllers

Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers. An attacker may use these vulnerabilities to perform unauthorized access and to execute unauthorized code remotely to the controller products.

CWE-22Jan 14, 2025
CVSS6.6v3.1EPSS0.661%PoCs0SignalsSTIX

Vulnerability Report on Improper Restriction of XML External Entity Reference in NB-Designer

We found a vulnerability Improper Restriction of XML External Entity Reference (CWE-611) in NB-series NX-Designer. Attackers may be able to abuse this vulnerability to disclose confidential data on a computer.

CWE-611Jan 14, 2025
CVSS5.5v3.1EPSS0.226%PoCs0SignalsSTIX

Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability. If this vulnerability is exploited, an attacker may access the program which is protected by Data Protection function.

CWE-863Nov 1, 2024
CVSS5.7v3.0EPSS0.18%PoCs0SignalsSTIX

Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product may not be able to detect the alteration.

CWE-345Jun 24, 2024
CVSS7.5v3.1EPSS0.193%PoCs0SignalsSTIX

Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-AL[][]D-V4 (The version which was installed with a DVD ver. 4.61.1 or lower, and was updated through CX-One V4 auto update in January 2024 or prior) and Sysmac Studio SYSMAC-SE2[][][] (The version which was installed with a DVD ver. 1.56 or lower, and was updated through Sysmac Studio V1 auto update in January 2024 or prior). Opening a specially crafted project file may lead to arbitrary code execution.

CWE-761May 1, 2024
CVSS5.9v3.1EPSS0.238%PoCs0SignalsSTIX

Out-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-AL[][]D-V4 Ver. 9.81 or lower. Opening a specially crafted project file may lead to information disclosure and/or the product being crashed.

CWE-125May 1, 2024
CVSS7.8v3.1EPSS0.245%PoCs0SignalsSTIX

Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Series. An arbitrary file in the affected product may be accessed or arbitrary code may be executed by processing a specially crafted request sent from a remote attacker with an administrative privilege. As for the details of the affected product names/versions, see the information provided by the vendor under [References] section.

CWE-22Mar 12, 2024
CVSS7.2v3.1EPSS0.88%PoCs0SignalsSTIX

CX-Designer Ver.3.740 and earlier (included in CX-One CXONE-AL[][]D-V4) contains an improper restriction of XML external entity reference (XXE) vulnerability. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Designer is installed may be disclosed.

CWE-611Oct 23, 2023
CVSS5.5v3.1EPSS0.195%PoCs0SignalsSTIX

Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22317 and CVE-2023-22314.

CWE-416Aug 3, 2023
CVSS7.8v3.1EPSS0.238%PoCs0SignalsSTIX

Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22277 and CVE-2023-22317.

CWE-416Aug 3, 2023
CVSS7.8v3.1EPSS0.238%PoCs0SignalsSTIX

Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22277 and CVE-2023-22314.

CWE-416Aug 3, 2023
CVSS7.8v3.1EPSS0.238%PoCs0SignalsSTIX

Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.

CWE-416Aug 3, 2023
CVSS7.8v3.1EPSS0.218%PoCs0SignalsSTIX

Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.

CWE-787Aug 3, 2023
CVSS7.8v3.1EPSS0.241%PoCs0SignalsSTIX

Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.

CWE-125Aug 3, 2023
CVSS7.8v3.1EPSS0.218%PoCs0SignalsSTIX

Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product receives a packet which is specially crafted by a remote unauthenticated attacker, the unit of the affected product may fall into a denial-of-service (DoS) condition. Affected products/versions are as follows: CJ2M CPU Unit CJ2M-CPU3[] Unit…

CWE-1284Aug 3, 2023
CVSS7.5v3.1EPSS0.866%PoCs0SignalsSTIX

FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues -- (1)Plaintext communication, and (2)No authentication required. When FINS messages are intercepted, the contents may be retrieved. When arbitrary FINS messages are injected, any commands may be executed on…

CWE-306Jun 19, 2023
CVSS9.8v3.1EPSS1.39%PoCs0SignalsSTIX

Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. By having a user open a specially crafted SDD file, arbitrary code may be executed and/or information may be disclosed.

CWE-787May 10, 2023
CVSS7.8v3.1EPSS0.226%PoCs0SignalsSTIX

Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed.

CWE-611Jan 30, 2023
CVSS5.5v3.1EPSS0.211%PoCs0SignalsSTIX

CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

CWE-824Jan 17, 2023
CVSS7.8v3.1EPSS0.2%PoCs0SignalsSTIX

Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authentication. A remote unauthenticated attacker may read/write in arbitrary area of the device memory, which may lead to overwriting the firmware, causing a denial-of-service (DoS) condition, and/or arbitrary code execution.

CWE-489Jan 17, 2023
CVSS9.8v3.1EPSS1.17%PoCs0SignalsSTIX

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,

CWE-416Dec 21, 2022
CVSS7.8v3.1EPSS0.237%PoCs0SignalsSTIX

Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.

CWE-416Dec 7, 2022
CVSS7.8v3.1EPSS0.249%PoCs0SignalsSTIX

Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.

CWE-787Dec 7, 2022
CVSS7.8v3.1EPSS0.242%PoCs0SignalsSTIX