CSRF in Omron Ns10
CVE-2014-2369
Cross-site request forgery (CSRF) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.006 (44.8th percentile) — read the EPSS interpretation.
Affected products
- Omron Ns10 — versions 8.1xx
- Omron Ns10_hmi_terminal
- Omron Ns12 — versions 8.1xx
- Omron Ns12_hmi_terminal
- Omron Ns15 — versions 8.1xx
- Omron Ns15_hmi_terminal
- Omron Ns5 — versions 8.1xx
- Omron Ns5_hmi_terminal
- Omron Ns8 — versions 8.1xx
- Omron Ns8_hmi_terminal
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov
- af854a3a-2127-422b-91ae-364da2661108 (Third Party Advisory, US Government Resource)