İçeriğe atla
Noroxi

Omron kayıtları

omron üreticisine ait 91 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
9
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

91 kayıt
  • CVE-2000-0704
    44Planlayın

    Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    omron · worldview20 Eki 2000

  • CVE-2019-18259
    40Planlayın

    In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary messages or execute commands.

    KritikCVSS 9,8İstismar yokEPSS %2

    omron · plc cj firmware16 Ara 2019

  • CVE-2015-0987
    40Planlayın

    Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 rely on cleartext password transmission,

    KritikCVSS 10,0İstismar yokEPSS %1

    omron · cx-programmer5 Eki 2015

  • CVE-2018-6624
    39İzleyin

    OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific scree

    KritikCVSS 9,8İstismar yokEPSS %2

    omron · ns series firmware5 Şub 2018

  • CVE-2023-27396
    39İzleyin

    FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation)

    KritikCVSS 9,8İstismar yokEPSS %1

    omron · cs1w-eip21 firmware19 Haz 2023

  • CVE-2019-18261
    39İzleyin

    In Omron PLC CS series, all versions, Omron PLC CJ series, all versions, and Omron PLC NJ series, all versions, the software does not implem

    KritikCVSS 9,8İstismar yokEPSS %1

    omron · plc cj firmware16 Ara 2019

  • CVE-2023-22357
    39İzleyin

    Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being execu

    KritikCVSS 9,8İstismar yokEPSS %1

    omron · cp1l-el20dr-d firmware17 Oca 2023

  • CVE-2022-31206
    39İzleyin

    The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentica

    KritikCVSS 9,8İstismar yokEPSS %1

    omron · nx701-1600 firmware26 Tem 2022

  • CVE-2019-18269
    39İzleyin

    Omron’s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %1

    omron · plc cj firmware16 Ara 2019

  • CVE-2022-31207
    39İzleyin

    The Omron SYSMAC Cx product family PLCs (CS series, CJ series, and CP series) through 2022-05-18 lack cryptographic authentication.

    KritikCVSS 9,8İstismar yokEPSS %1

    omron · sysmac cs1 firmware26 Tem 2022

  • CVE-2022-3396
    39İzleyin

    OMRON CX-Programmer Out-of-bounds Write

    KritikCVSS 9,8İstismar yokEPSS %1

    omron · cx-programmer6 Eki 2022

  • CVE-2022-3398
    39İzleyin

    OMRON CX-Programmer Out-of-bounds Write

    KritikCVSS 9,8İstismar yokEPSS %1

    omron · cx-programmer6 Eki 2022

  • CVE-2022-3397
    39İzleyin

    OMRON CX-Programmer Out-of-bounds Write

    KritikCVSS 9,8İstismar yokEPSS %1

    omron · cx-programmer6 Eki 2022

  • CVE-2020-27261
    37İzleyin

    The Omron CX-One Version 4.60 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbi

    YüksekCVSS 8,8İstismar yokEPSS %8

    omron · cx-one9 Şub 2021

  • CVE-2020-27259
    36İzleyin

    The Omron CX-One Version 4.60 and prior may allow an attacker to supply a pointer to arbitrary memory locations, which may allow an attacker

    YüksekCVSS 8,8İstismar yokEPSS %3

    omron · cx-one9 Şub 2021

  • CVE-2018-19011
    36İzleyin

    CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file.

    YüksekCVSS 8,8İstismar yokEPSS %2

    omron · cx-supervisor22 Oca 2019

  • CVE-2018-19017
    36İzleyin

    Several use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior).

    YüksekCVSS 8,8İstismar yokEPSS %2

    omron · cx-supervisor22 Oca 2019

  • CVE-2019-18251
    36İzleyin

    In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS.

    YüksekCVSS 8,8İstismar yokEPSS %2

    omron · cx-supervisor25 Kas 2019

  • CVE-2022-45790
    36İzleyin

    Omron FINS memory protection susceptible to bruteforce

    KritikCVSS 9,1İstismar yokEPSS %1

    omron · cj1g-cpu45p firmware22 Oca 2024

  • CVE-2023-0811
    36İzleyin

    Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored.

    KritikCVSS 9,1İstismar yokEPSS %1

    omron · sysmac cj2h-cpu64 firmware16 Mar 2023

  • CVE-2021-27413
    34İzleyin

    Omron CX-One Versions 4.60 and prior, including CX-Server Versions 5.0.29.0 and prior, are vulnerable to a stack-based buffer overflow, whic

    YüksekCVSS 7,8İstismar yokEPSS %10

    omron · cx-one13 May 2021

  • CVE-2022-21137
    34İzleyin

    Omron CX-One Versions 4.60 and prior are vulnerable to a stack-based buffer overflow while processing specific project files, which may allo

    YüksekCVSS 7,8İstismar yokEPSS %9

    omron · cx-one14 Oca 2022

  • CVE-2022-33208
    33İzleyin

    Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machi

    YüksekCVSS 8,1İstismar yokEPSS %2

    omron · nx701-1600 firmware3 Tem 2022

  • CVE-2022-26419
    32İzleyin

    Rockwell Automation Studio 5000 Logix Designer Code Injection

    YüksekCVSS 7,8İstismar yokEPSS %2

    omron · cx-position1 Nis 2022

  • CVE-2020-27257
    32İzleyin

    This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can re

    YüksekCVSS 7,8İstismar yokEPSS %2

    omron · cx-one9 Şub 2021