Authentication bypass by capture-replay in OMRON Corporation Machine automation…
Priority MEDIUM 41CWE-489Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- High
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-294.
Summary
Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow an adjacent attacker who can analyze the communication between the controller and the specific software used by OMRON internally to cause a denial-of-service (DoS) condition or execute a malicious program.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01271 69th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| OMRON Corporation | Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series | Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier | — | No fix listed | CNA |
- Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series VendorOMRON Corporation Affected Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier Fixed in — No fix listed CNA
CPE configurations NVD · 104
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:omron:nx701-1600_firmware:*:*:*:*:*:*:*:* | up to 1.28 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx701-1600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx701-1700_firmware:*:*:*:*:*:*:*:* | up to 1.28 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx701-1700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx701-z700_firmware:*:*:*:*:*:*:*:* | up to 1.28 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx701-z700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx701-z600_firmware:*:*:*:*:*:*:*:* | up to 1.28 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx701-z600:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx701-1720_firmware:*:*:*:*:*:*:*:* | up to 1.28 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx701-1720:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
- cpe:2.3:o:omron:nx701-1600_firmware:*:*:*:*:*:*:*:* Versions up to 1.28 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx701-1600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx701-1700_firmware:*:*:*:*:*:*:*:* Versions up to 1.28 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx701-1700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx701-z700_firmware:*:*:*:*:*:*:*:* Versions up to 1.28 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx701-z700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx701-z600_firmware:*:*:*:*:*:*:*:* Versions up to 1.28 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx701-z600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx701-1720_firmware:*:*:*:*:*:*:*:* Versions up to 1.28 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx701-1720:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
Show 94 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:omron:nx701-1620_firmware:*:*:*:*:*:*:*:* | up to 1.28 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx701-1620:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx102-1200_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx102-1200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx102-1100_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx102-1100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx102-1000_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx102-1000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx102-1220_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx102-1220:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx102-1120_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx102-1120:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx102-1020_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx102-1020:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx102-9020_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx102-9020:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx1p2-1140dt_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx1p2-1140dt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx1p2-1140dt1_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx1p2-1140dt1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx1p2-1040dt_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx1p2-1040dt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx1p2-1040dt1_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx1p2-1040dt1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx1p2-9024dt_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx1p2-9024dt:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx1p2-9024dt1_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx1p2-9024dt1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx1w-cif01_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx1w-cif01:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx1w-cif11_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx1w-cif11:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx1w-cif12_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx1w-cif12:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx1w-adb21_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx1w-adb21:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx1w-dab21v_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx1w-dab21v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nx1w-mab221_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nx1w-mab221:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-1500_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-1500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-140_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-140:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-1300_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-1300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-r500_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-r500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-r520_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-r520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-r400_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-r400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-r420_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-r420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-r300_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-r300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-r320_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-r320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-5300_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-5300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-1520_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-1520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-1420_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-1420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-1320_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-1320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj101-1020_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj101-1020:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj101-9020_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj101-9020:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-1340_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-1340:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-4500_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-4500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-4400_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-4400:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-4300_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-4300:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-4310_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-4310:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj501-4320_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj501-4320:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj301-1200_firmware:*:*:*:*:*:*:*:* | before 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj301-1200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj301-1100_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj301-1100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj101-1000_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj101-1000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj101-9000_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj101-9000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj-pa3001_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj-pa3001:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
| cpe:2.3:o:omron:nj-pd3001_firmware:*:*:*:*:*:*:*:* | up to 1.48 | Vulnerable | OMRON Corporation |
| cpe:2.3:h:omron:nj-pd3001:-:*:*:*:*:*:*:* | not specified by NVD | Running on | OMRON Corporation |
- cpe:2.3:o:omron:nx701-1620_firmware:*:*:*:*:*:*:*:* Versions up to 1.28 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx701-1620:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx102-1200_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx102-1200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx102-1100_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx102-1100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx102-1000_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx102-1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx102-1220_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx102-1220:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx102-1120_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx102-1120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx102-1020_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx102-1020:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx102-9020_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx102-9020:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx1p2-1140dt_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx1p2-1140dt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx1p2-1140dt1_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx1p2-1140dt1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx1p2-1040dt_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx1p2-1040dt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx1p2-1040dt1_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx1p2-1040dt1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx1p2-9024dt_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx1p2-9024dt:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx1p2-9024dt1_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx1p2-9024dt1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx1w-cif01_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx1w-cif01:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx1w-cif11_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx1w-cif11:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx1w-cif12_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx1w-cif12:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx1w-adb21_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx1w-adb21:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx1w-dab21v_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx1w-dab21v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nx1w-mab221_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nx1w-mab221:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-1500_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-1500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-140_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-140:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-1300_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-1300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-r500_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-r500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-r520_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-r520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-r400_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-r400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-r420_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-r420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-r300_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-r300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-r320_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-r320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-5300_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-5300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-1520_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-1520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-1420_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-1420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-1320_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-1320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj101-1020_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj101-1020:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj101-9020_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj101-9020:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-1340_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-1340:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-4500_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-4500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-4400_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-4400:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-4300_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-4300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-4310_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-4310:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj501-4320_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj501-4320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj301-1200_firmware:*:*:*:*:*:*:*:* Versions before 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj301-1200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj301-1100_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj301-1100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj101-1000_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj101-1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj101-9000_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj101-9000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj-pa3001_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj-pa3001:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
- cpe:2.3:o:omron:nj-pd3001_firmware:*:*:*:*:*:*:*:* Versions up to 1.48 Vulnerable ·OMRON Corporation
- cpe:2.3:h:omron:nj-pd3001:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·OMRON Corporation
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-33971
- 2026-10-03 Alias added: GHSA-29r3-8mg2-rxqp
References
More OMRON Corporation Nj-pa3001 Firmware vulnerabilities
- TI-2023-12128 Missing authentication in OMRON Corporation Multiple OMRON products which implement FINS… CVSS 3.1CRITICAL 9.8
- TI-2022-15067 Hard-coded credentials in OMRON Corporation Machine automation controller NJ series… CVSS 3.1CRITICAL 9.4
- TI-2022-14637 Authentication bypass by capture-replay in OMRON Corporation Machine automation… CVSS 3.1HIGH 8.1
- TI-2024-22268 Insufficient verification of data authenticity in OMRON Corporation NJ Series CPU Unit CVSS 3.1HIGH 7.5
Sources
- CVE-2022-33971 · CVE Program
- CVE-2022-33971 · NVD
- FIRST EPSS
- GHSA-29r3-8mg2-rxqp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences