What is CVE-2022-33971?

CVE-2022-33971 is a high-severity vulnerability in Omron Nj101-1000, classified under Authentication Bypass by Capture-replay. CVSS score: 7.5/10. Published 2022-07-04.

How severe is CVE-2022-33971?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Omron Nj101-1000

CVE-2022-33971

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller…

EPSS: 0.010 (59.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Omron Nj101-1000
Omron Nj101-1000_firmware
Omron Nj101-1020
Omron Nj101-1020_firmware
Omron Nj101-9000
Omron Nj101-9000_firmware
Omron Nj101-9020
Omron Nj101-9020_firmware
Omron Nj301-1100
Omron Nj301-1100_firmware

Weakness classification (CWE)

CWE-294 — Authentication Bypass by Capture-replay
CWE-489 — Active Debug Code

References

vultures@jpcert.or.jp (VDB Entry, Third Party Advisory, x_refsource_MISC)
vultures@jpcert.or.jp (x_refsource_MISC, Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2022-33971?: CVE-2022-33971 is a high-severity vulnerability in Omron Nj101-1000, classified under Authentication Bypass by Capture-replay. CVSS score: 7.5/10. Published 2022-07-04.
How severe is CVE-2022-33971?: High severity. CVSS v3 base score is 7.5 out of 10.