Omron Corporation
35 CVEs across 25 Omron Corporation products. Browse Omron Corporation vulnerabilities, severities, and proof-of-concept exploits.
Omron Corporation products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-1384 | High | 7.0 | 2025-07-14 | Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac S… |
CVE-2025-0591 | High | 7.8 | 2025-02-17 | Out-of-bounds Read vulnerability (CWE-125) was found in CX-Programmer. Attackers may be able to read sensitive information or cause an application crash by abu… |
CVE-2024-12298 | Medium | 5.5 | 2025-01-14 | We found a vulnerability Improper Restriction of XML External Entity Reference (CWE-611) in NB-series NX-Designer. Attackers may be able to abuse this vulnerab… |
CVE-2024-12083 | Medium | 6.6 | 2025-01-14 | Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers. An attacker may use these vulnerabilities to perform unauthorized… |
CVE-2024-49501 | Medium | 5.7 | 2024-11-01 | Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability. If this vulnerability is exploited, an attacker may access the p… |
CVE-2024-33687 | High | 7.5 | 2024-06-24 | Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the af… |
CVE-2024-31413 | Medium | 5.9 | 2024-05-01 | Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-AL[][]D-V4 (The version which was installed with a DVD ver. 4.61.1 or lower… |
CVE-2024-31412 | High | 7.8 | 2024-05-01 | Out-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-AL[][]D-V4 Ver. 9.81 or lower. Opening a specially crafted project file may l… |
CVE-2024-27121 | High | 7.2 | 2024-03-12 | Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Series. An arbitrary file in the affected p… |
CVE-2023-43624 | Medium | 5.5 | 2023-10-23 | CX-Designer Ver.3.740 and earlier (included in CX-One CXONE-AL[][]D-V4) contains an improper restriction of XML external entity reference (XXE) vulnerability… |
CVE-2023-22277 | High | 7.8 | 2023-08-03 | Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or ar… |
CVE-2023-22317 | High | 7.8 | 2023-08-03 | Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or ar… |
CVE-2023-22314 | High | 7.8 | 2023-08-03 | Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or ar… |
CVE-2023-38748 | High | 7.8 | 2023-08-03 | Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file… |
CVE-2023-38747 | High | 7.8 | 2023-08-03 | Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially craft… |
CVE-2023-38746 | High | 7.8 | 2023-08-03 | Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted… |
CVE-2023-38744 | High | 7.5 | 2023-08-03 | Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2… |
CVE-2023-27396 | Critical | 9.8 | 2023-06-19 | FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is u… |
CVE-2023-27385 | High | 7.8 | 2023-05-10 | Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. By having a user open a specially crafted SDD file, arbitrary code may be… |
CVE-2023-22322 | Medium | 5.5 | 2023-01-30 | Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially craf… |
CVE-2023-22366 | High | 7.8 | 2023-01-17 | CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted project file may lead to i… |
CVE-2023-22357 | Critical | 9.8 | 2023-01-17 | Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authent… |
CVE-2022-46282 | High | 7.8 | 2022-12-21 | Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file, |
CVE-2022-43667 | High | 7.8 | 2022-12-07 | Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution… |
CVE-2022-43509 | High | 7.8 | 2022-12-07 | Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by havin… |
CVE-2022-43508 | High | 7.8 | 2022-12-07 | Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a u… |
CVE-2022-34151 | High | 8.1 | 2022-07-04 | Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7… |
CVE-2022-33971 | High | 7.5 | 2022-07-04 | Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation contr… |
CVE-2022-33208 | High | 8.1 | 2022-07-04 | Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation contr… |
CVE-2022-25325 | High | 7.8 | 2022-03-10 | Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure an… |
CVE-2022-25234 | High | 7.8 | 2022-03-10 | Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosu… |
CVE-2022-25230 | High | 7.8 | 2022-03-10 | Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure an… |
CVE-2022-21219 | High | 7.8 | 2022-03-10 | Out-of-bounds read vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosur… |
CVE-2022-21124 | High | 7.8 | 2022-03-10 | Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosu… |
CVE-2021-20836 | Medium | 6.5 | 2021-10-19 | Out-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with administrative privileges to cause information disclosure and… |