Vulnerabilites related to omron - nx701-1600_firmware
cve-2022-34151
Vulnerability from cvelistv5
Published
2022-07-04 01:51
Modified
2024-08-03 08:16
Severity ?
EPSS score ?
Summary
Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who successfully obtained the user credentials by analyzing the affected product to access the controller.
References
▼ | URL | Tags |
---|---|---|
https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf | x_refsource_MISC | |
https://jvn.jp/en/vu/JVNVU97050784/index.html | x_refsource_MISC |
Impacted products
Vendor | Product | Version | ||
---|---|---|---|---|
OMRON Corporation | Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series |
Version: Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T08:16:17.136Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://jvn.jp/en/vu/JVNVU97050784/index.html" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Machine automation controller NJ series, Machine automation controller NX series, Automation software \u0027Sysmac Studio\u0027, and Programmable Terminal (PT) NA series", "vendor": "OMRON Corporation", "versions": [ { "status": "affected", "version": "Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software \u0027Sysmac Studio\u0027 all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier" } ] } ], "descriptions": [ { "lang": "en", "value": "Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software \u0027Sysmac Studio\u0027 all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who successfully obtained the user credentials by analyzing the affected product to access the controller." } ], "problemTypes": [ { "descriptions": [ { "description": "Use of Hard-coded Credentials", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2022-07-04T02:25:19", "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf" }, { "tags": [ "x_refsource_MISC" ], "url": "https://jvn.jp/en/vu/JVNVU97050784/index.html" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "vultures@jpcert.or.jp", "ID": "CVE-2022-34151", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Machine automation controller NJ series, Machine automation controller NX series, Automation software \u0027Sysmac Studio\u0027, and Programmable Terminal (PT) NA series", "version": { "version_data": [ { "version_value": "Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software \u0027Sysmac Studio\u0027 all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier" } ] } } ] }, "vendor_name": "OMRON Corporation" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software \u0027Sysmac Studio\u0027 all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who successfully obtained the user credentials by analyzing the affected product to access the controller." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Use of Hard-coded Credentials" } ] } ] }, "references": { "reference_data": [ { "name": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf", "refsource": "MISC", "url": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf" }, { "name": "https://jvn.jp/en/vu/JVNVU97050784/index.html", "refsource": "MISC", "url": "https://jvn.jp/en/vu/JVNVU97050784/index.html" } ] } } } }, "cveMetadata": { "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "assignerShortName": "jpcert", "cveId": "CVE-2022-34151", "datePublished": "2022-07-04T01:51:00", "dateReserved": "2022-06-21T00:00:00", "dateUpdated": "2024-08-03T08:16:17.136Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2022-33971
Vulnerability from cvelistv5
Published
2022-07-04 01:50
Modified
2024-08-03 08:16
Severity ?
EPSS score ?
Summary
Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow an adjacent attacker who can analyze the communication between the controller and the specific software used by OMRON internally to cause a denial-of-service (DoS) condition or execute a malicious program.
References
▼ | URL | Tags |
---|---|---|
https://jvn.jp/en/vu/JVNVU97050784/index.html | x_refsource_MISC | |
https://www.ia.omron.com/product/vulnerability/OMSR-2022-002_en.pdf | x_refsource_MISC |
Impacted products
Vendor | Product | Version | ||
---|---|---|---|---|
OMRON Corporation | Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series |
Version: Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T08:16:16.110Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://jvn.jp/en/vu/JVNVU97050784/index.html" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-002_en.pdf" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Machine automation controller NJ series, Machine automation controller NX series, Automation software \u0027Sysmac Studio\u0027, and Programmable Terminal (PT) NA series", "vendor": "OMRON Corporation", "versions": [ { "status": "affected", "version": "Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier" } ] } ], "descriptions": [ { "lang": "en", "value": "Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow an adjacent attacker who can analyze the communication between the controller and the specific software used by OMRON internally to cause a denial-of-service (DoS) condition or execute a malicious program." } ], "problemTypes": [ { "descriptions": [ { "description": "Authentication Bypass by Capture-replay", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2022-07-04T01:50:54", "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://jvn.jp/en/vu/JVNVU97050784/index.html" }, { "tags": [ "x_refsource_MISC" ], "url": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-002_en.pdf" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "vultures@jpcert.or.jp", "ID": "CVE-2022-33971", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Machine automation controller NJ series, Machine automation controller NX series, Automation software \u0027Sysmac Studio\u0027, and Programmable Terminal (PT) NA series", "version": { "version_data": [ { "version_value": "Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier" } ] } } ] }, "vendor_name": "OMRON Corporation" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow an adjacent attacker who can analyze the communication between the controller and the specific software used by OMRON internally to cause a denial-of-service (DoS) condition or execute a malicious program." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Authentication Bypass by Capture-replay" } ] } ] }, "references": { "reference_data": [ { "name": "https://jvn.jp/en/vu/JVNVU97050784/index.html", "refsource": "MISC", "url": "https://jvn.jp/en/vu/JVNVU97050784/index.html" }, { "name": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-002_en.pdf", "refsource": "MISC", "url": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-002_en.pdf" } ] } } } }, "cveMetadata": { "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "assignerShortName": "jpcert", "cveId": "CVE-2022-33971", "datePublished": "2022-07-04T01:50:54", "dateReserved": "2022-06-21T00:00:00", "dateUpdated": "2024-08-03T08:16:16.110Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2022-31206
Vulnerability from cvelistv5
Published
2022-07-26 21:28
Modified
2024-08-03 07:11
Severity ?
EPSS score ?
Summary
The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software (which compiles IEC 61131-3 conformant POU code to native machine code for execution by the PLC's runtime). The resulting machine code is executed by a runtime, typically controlled by a real-time operating system. The logic that is downloaded to the PLC does not seem to be cryptographically authenticated, allowing an attacker to manipulate transmitted object code to the PLC and execute arbitrary machine code on the processor of the PLC's CPU module in the context of the runtime. In the case of at least the NJ series, an RTOS and hardware combination is used that would potentially allow for memory protection and privilege separation and thus limit the impact of code execution. However, it was not confirmed whether these sufficiently segment the runtime from the rest of the RTOS.
References
▼ | URL | Tags |
---|---|---|
https://www.forescout.com/blog/ | x_refsource_MISC | |
https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-02 | x_refsource_MISC |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T07:11:39.676Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.forescout.com/blog/" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-02" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "descriptions": [ { "lang": "en", "value": "The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software (which compiles IEC 61131-3 conformant POU code to native machine code for execution by the PLC\u0027s runtime). The resulting machine code is executed by a runtime, typically controlled by a real-time operating system. The logic that is downloaded to the PLC does not seem to be cryptographically authenticated, allowing an attacker to manipulate transmitted object code to the PLC and execute arbitrary machine code on the processor of the PLC\u0027s CPU module in the context of the runtime. In the case of at least the NJ series, an RTOS and hardware combination is used that would potentially allow for memory protection and privilege separation and thus limit the impact of code execution. However, it was not confirmed whether these sufficiently segment the runtime from the rest of the RTOS." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2022-07-26T21:28:41", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://www.forescout.com/blog/" }, { "tags": [ "x_refsource_MISC" ], "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-02" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2022-31206", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software (which compiles IEC 61131-3 conformant POU code to native machine code for execution by the PLC\u0027s runtime). The resulting machine code is executed by a runtime, typically controlled by a real-time operating system. The logic that is downloaded to the PLC does not seem to be cryptographically authenticated, allowing an attacker to manipulate transmitted object code to the PLC and execute arbitrary machine code on the processor of the PLC\u0027s CPU module in the context of the runtime. In the case of at least the NJ series, an RTOS and hardware combination is used that would potentially allow for memory protection and privilege separation and thus limit the impact of code execution. However, it was not confirmed whether these sufficiently segment the runtime from the rest of the RTOS." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://www.forescout.com/blog/", "refsource": "MISC", "url": "https://www.forescout.com/blog/" }, { "name": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-02", "refsource": "MISC", "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-02" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2022-31206", "datePublished": "2022-07-26T21:28:41", "dateReserved": "2022-05-18T00:00:00", "dateUpdated": "2024-08-03T07:11:39.676Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2022-33208
Vulnerability from cvelistv5
Published
2022-07-04 01:50
Modified
2024-08-03 08:01
Severity ?
EPSS score ?
Summary
Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who can analyze the communication between the affected controller and automation software 'Sysmac Studio' and/or a Programmable Terminal (PT) to access the controller.
References
▼ | URL | Tags |
---|---|---|
https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf | x_refsource_MISC | |
https://jvn.jp/en/vu/JVNVU97050784/index.html | x_refsource_MISC |
Impacted products
Vendor | Product | Version | ||
---|---|---|---|---|
OMRON Corporation | Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series |
Version: Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T08:01:20.422Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://jvn.jp/en/vu/JVNVU97050784/index.html" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Machine automation controller NJ series, Machine automation controller NX series, Automation software \u0027Sysmac Studio\u0027, and Programmable Terminal (PT) NA series", "vendor": "OMRON Corporation", "versions": [ { "status": "affected", "version": "Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software \u0027Sysmac Studio\u0027 all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier" } ] } ], "descriptions": [ { "lang": "en", "value": "Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software \u0027Sysmac Studio\u0027 all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who can analyze the communication between the affected controller and automation software \u0027Sysmac Studio\u0027 and/or a Programmable Terminal (PT) to access the controller." } ], "problemTypes": [ { "descriptions": [ { "description": "Authentication Bypass by Capture-replay", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2022-07-04T02:25:11", "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf" }, { "tags": [ "x_refsource_MISC" ], "url": "https://jvn.jp/en/vu/JVNVU97050784/index.html" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "vultures@jpcert.or.jp", "ID": "CVE-2022-33208", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Machine automation controller NJ series, Machine automation controller NX series, Automation software \u0027Sysmac Studio\u0027, and Programmable Terminal (PT) NA series", "version": { "version_data": [ { "version_value": "Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software \u0027Sysmac Studio\u0027 all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier" } ] } } ] }, "vendor_name": "OMRON Corporation" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software \u0027Sysmac Studio\u0027 all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who can analyze the communication between the affected controller and automation software \u0027Sysmac Studio\u0027 and/or a Programmable Terminal (PT) to access the controller." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Authentication Bypass by Capture-replay" } ] } ] }, "references": { "reference_data": [ { "name": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf", "refsource": "MISC", "url": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf" }, { "name": "https://jvn.jp/en/vu/JVNVU97050784/index.html", "refsource": "MISC", "url": "https://jvn.jp/en/vu/JVNVU97050784/index.html" } ] } } } }, "cveMetadata": { "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "assignerShortName": "jpcert", "cveId": "CVE-2022-33208", "datePublished": "2022-07-04T01:50:44", "dateReserved": "2022-06-21T00:00:00", "dateUpdated": "2024-08-03T08:01:20.422Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2024-33687
Vulnerability from cvelistv5
Published
2024-06-24 15:03
Modified
2024-08-02 02:36
Severity ?
EPSS score ?
Summary
Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product may not be able to detect the alteration.
References
Impacted products
Vendor | Product | Version | |||||||
---|---|---|---|---|---|---|---|---|---|
▼ | OMRON Corporation | NJ Series CPU Unit |
Version: all versions |
||||||
|
{ "containers": { "adp": [ { "metrics": [ { "other": { "content": { "id": "CVE-2024-33687", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2024-06-24T20:23:44.445669Z", "version": "2.0.3" }, "type": "ssvc" } } ], "providerMetadata": { "dateUpdated": "2024-06-24T20:26:32.628Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "title": "CISA ADP Vulnrichment" }, { "providerMetadata": { "dateUpdated": "2024-08-02T02:36:04.543Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-004_en.pdf" }, { "tags": [ "x_transferred" ], "url": "https://jvn.jp/en/vu/JVNVU92504444/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "NJ Series CPU Unit", "vendor": "OMRON Corporation", "versions": [ { "status": "affected", "version": "all versions" } ] }, { "product": "NX Series CPU Unit", "vendor": "OMRON Corporation", "versions": [ { "status": "affected", "version": "all versions" } ] } ], "descriptions": [ { "lang": "en", "value": "Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product may not be able to detect the alteration." } ], "problemTypes": [ { "descriptions": [ { "description": "Insufficient verification of data authenticity", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2024-06-24T15:03:05.467Z", "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert" }, "references": [ { "url": "https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-004_en.pdf" }, { "url": "https://jvn.jp/en/vu/JVNVU92504444/" } ] } }, "cveMetadata": { "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "assignerShortName": "jpcert", "cveId": "CVE-2024-33687", "datePublished": "2024-06-24T15:03:05.467Z", "dateReserved": "2024-04-26T07:55:08.563Z", "dateUpdated": "2024-08-02T02:36:04.543Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
Vulnerability from fkie_nvd
Published
2022-07-04 02:15
Modified
2024-11-21 07:08
Severity ?
Summary
Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow an adjacent attacker who can analyze the communication between the controller and the specific software used by OMRON internally to cause a denial-of-service (DoS) condition or execute a malicious program.
References
▼ | URL | Tags | |
---|---|---|---|
vultures@jpcert.or.jp | https://jvn.jp/en/vu/JVNVU97050784/index.html | Third Party Advisory, VDB Entry | |
vultures@jpcert.or.jp | https://www.ia.omron.com/product/vulnerability/OMSR-2022-002_en.pdf | Mitigation, Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://jvn.jp/en/vu/JVNVU97050784/index.html | Third Party Advisory, VDB Entry | |
af854a3a-2127-422b-91ae-364da2661108 | https://www.ia.omron.com/product/vulnerability/OMSR-2022-002_en.pdf | Mitigation, Vendor Advisory |
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1600_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C32C9A6D-2AF6-4005-AD33-E54B2726A769", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1600:-:*:*:*:*:*:*:*", "matchCriteriaId": "A613C260-184B-4131-B2EC-656D8322F86B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1700_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "929C2ED9-5BBD-4585-A95F-A3C5F12C5376", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1700:-:*:*:*:*:*:*:*", "matchCriteriaId": "753A218D-C738-42E5-B523-ED7CACCAEC82", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-z700_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B87C2BC4-8CDE-42CA-B0D3-EEBEAD0BCECF", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-z700:-:*:*:*:*:*:*:*", "matchCriteriaId": "36F25E10-A76C-4A16-B72B-4B9E572EDBAB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-z600_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "586D8ACC-BD51-403C-AAF6-55392741D582", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-z600:-:*:*:*:*:*:*:*", "matchCriteriaId": "90B7C106-4C14-4C0A-BA78-9A3DD63EF576", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1720_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "67236B5C-8045-4413-8767-1F0904EF6E7F", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1720:-:*:*:*:*:*:*:*", "matchCriteriaId": "2434BE7E-3E5D-48A9-838C-BCC6055135F9", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1620_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1805212B-75E3-4443-A7D4-B889EA53721A", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1620:-:*:*:*:*:*:*:*", "matchCriteriaId": "210D7FA7-18A3-45B7-976B-9DEDC59294C7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1200_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "91116EDD-1D61-4D78-9367-C78E80E85BE3", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1200:-:*:*:*:*:*:*:*", "matchCriteriaId": "D8A6528B-2160-4CE4-88B2-EC69DB5797B4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1100_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EEA800B1-6E43-45C8-833E-744831490B98", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1100:-:*:*:*:*:*:*:*", "matchCriteriaId": "A1E68759-07B1-4F7B-8EF8-0429C8CFCAAF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "509A80E2-0FE2-4E65-A276-351953EA403D", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1000:-:*:*:*:*:*:*:*", "matchCriteriaId": "D01F33E2-E10C-4B3F-9326-7022924423DB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1220_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D3A572C4-8EDA-4A4D-9358-9E2313F9D71A", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1220:-:*:*:*:*:*:*:*", "matchCriteriaId": "FE463BB1-BE67-4D80-8FE7-85F960945AF5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1120_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "960BC2F9-7B36-419A-BEF6-1895666422A2", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1120:-:*:*:*:*:*:*:*", "matchCriteriaId": "E72347A8-8725-4DAB-9D2C-609072A4E904", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E2F70AA8-7DB0-415F-AB71-4F527E930C56", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1020:-:*:*:*:*:*:*:*", "matchCriteriaId": "B1A91E22-8F08-4470-BC4A-14D25A827607", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-9020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "644FC209-89BD-46E5-BD08-1A9518200AF4", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-9020:-:*:*:*:*:*:*:*", "matchCriteriaId": "34CE73C8-BF67-4BC3-81B2-275393441C91", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-1140dt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "53B955C2-94EE-4C9A-9858-B38AF619640A", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-1140dt:-:*:*:*:*:*:*:*", "matchCriteriaId": "BFF59B0A-C08C-4D56-B301-631DD155BEF4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-1140dt1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B73A630B-5A24-459F-80E5-E88C0D3C04BD", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-1140dt1:-:*:*:*:*:*:*:*", "matchCriteriaId": "63EEFB13-8B20-4A42-8511-98C4C8E045FA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-1040dt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "29BDE27D-6AFE-459A-B368-4D59BF2112EB", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-1040dt:-:*:*:*:*:*:*:*", "matchCriteriaId": "A7EF898A-8273-4044-8F4B-B2082294749F", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-1040dt1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CD05B298-12C5-48B7-814D-62CA3DD6623A", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-1040dt1:-:*:*:*:*:*:*:*", "matchCriteriaId": "B8DD457B-3E36-4C10-B34F-21CD0B931459", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-9024dt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5C0048B2-460B-4795-A23F-B83EC8830900", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-9024dt:-:*:*:*:*:*:*:*", "matchCriteriaId": "4B1E7DBC-6211-4503-9154-D0BD0FA3BE95", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-9024dt1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BB34E3A4-B7AF-461F-BA78-48C496B064D6", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-9024dt1:-:*:*:*:*:*:*:*", "matchCriteriaId": "F193D7DE-97C1-4883-871D-78AC7FCB9B14", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-cif01_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D2279FB9-11F5-4846-92C9-C657E36D7B02", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-cif01:-:*:*:*:*:*:*:*", "matchCriteriaId": "C9E45E4A-447D-4DE9-AC15-50BD2DEC5AAB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-cif11_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0E1F7962-856D-4C94-A3FE-A14591B5B982", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-cif11:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA6772B4-5B9D-4642-9DA6-5595C92895C4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-cif12_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "60836E6B-91EC-44A7-8FFF-535A32A83986", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-cif12:-:*:*:*:*:*:*:*", "matchCriteriaId": "BD3B3071-1C48-4AD0-9C82-59A16F52944D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-adb21_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "92D1E782-1625-41E0-81C2-F247628B1081", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-adb21:-:*:*:*:*:*:*:*", "matchCriteriaId": "148C75FA-08F5-401A-B4E9-989ED80AF3EC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-dab21v_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7E6F2CDD-7D0F-480E-9925-8A6F2B1D2825", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-dab21v:-:*:*:*:*:*:*:*", "matchCriteriaId": "BA779FC7-7C37-411C-BFD3-EE9B87E8D861", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-mab221_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F88219CC-5788-4B68-95C7-1D6746CCF5C7", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-mab221:-:*:*:*:*:*:*:*", "matchCriteriaId": "48E3688A-B3EE-441E-A16A-52FC683D4F1D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1500_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "03C70E33-A661-4974-A0D4-935C6EE1CB7A", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1500:-:*:*:*:*:*:*:*", "matchCriteriaId": "DD281699-D123-4301-9EDF-4BE249E24FF8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-140_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B4A80DE2-ECC9-4B35-B999-57573D386581", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-140:-:*:*:*:*:*:*:*", "matchCriteriaId": "E4824951-49CB-4E85-A736-28A72C514FB3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AD94505F-4294-4BF2-8A2F-13FC419D3D96", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1300:-:*:*:*:*:*:*:*", "matchCriteriaId": "2917E7F0-DAA8-4D3B-A5E4-FB0ACAEF02C5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r500_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E01A5FE5-B310-4C46-93FB-A6A8B492E179", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r500:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A1BA508-3DBE-46C4-B72C-312AC3403C27", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r520_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CDEDFECF-1490-4B47-BD5A-54F560C80CF4", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r520:-:*:*:*:*:*:*:*", "matchCriteriaId": "36BDD615-7933-4EF5-B2E5-68EB4FA776B7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r400_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B8FB4EB9-6E39-423B-84EF-B97698F896F0", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r400:-:*:*:*:*:*:*:*", "matchCriteriaId": "5A453709-E9EE-4DD8-8638-04752B9DFB0C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r420_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BD6DAE59-9863-44EE-97CC-503B980FB9AA", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r420:-:*:*:*:*:*:*:*", "matchCriteriaId": "C264C95F-F8CE-4EC1-B5A5-71998F0A75C3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1B4F9EF2-6C73-40AA-AF3B-BCCDFAF92E0A", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r300:-:*:*:*:*:*:*:*", "matchCriteriaId": "A8A4809E-770F-4D7B-A532-37160D8A3943", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "84C41F6C-7B86-4823-8214-9C244283C3AE", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r320:-:*:*:*:*:*:*:*", "matchCriteriaId": "32E135F9-CB75-49AF-B7C3-25E8EA3AB991", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-5300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6A1EC714-602B-4946-9857-EA601CEE8504", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-5300:-:*:*:*:*:*:*:*", "matchCriteriaId": "1FEF30DD-FCF0-499E-B5C2-4184C9A7E9D8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1520_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2BA40F4B-9EA2-416C-876C-714927FF9F32", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1520:-:*:*:*:*:*:*:*", "matchCriteriaId": "CBBE1648-D428-4A43-831D-AB3AF3F05739", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1420_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F22BED01-FC93-49D6-8623-053EE4327EAB", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1420:-:*:*:*:*:*:*:*", "matchCriteriaId": "148C6AE8-1480-4822-8E0B-1E8575246878", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "56A035E5-FBAD-44D1-879E-9C4062DF02B4", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1320:-:*:*:*:*:*:*:*", "matchCriteriaId": "69D21068-A51D-48B2-BF17-68BC61737EBC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-1020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D7E91BEB-06D4-4B01-8BC6-B252F299EBB0", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-1020:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A75CF5D-0ADE-448E-BF3C-8E2C268EE1BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-9020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1CB51A57-B840-4E4E-A970-B95E61B9D325", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-9020:-:*:*:*:*:*:*:*", "matchCriteriaId": "8696CE8A-C041-4EED-888B-36F2E499E67A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1340_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1E7ADA83-1E1B-459C-966C-00DD46B96198", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1340:-:*:*:*:*:*:*:*", "matchCriteriaId": "1B381AE4-A769-403A-97FA-14FA5F8122CC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4500_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E19F9721-B79A-4C5D-8414-86C709D4C292", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4500:-:*:*:*:*:*:*:*", "matchCriteriaId": "7E8F99DC-4992-4141-AD76-B8A0A690AD4D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4400_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7124BF89-F495-4C5D-BBC8-7FFF4F160B1D", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4400:-:*:*:*:*:*:*:*", "matchCriteriaId": "8D53224A-F4AE-42D5-9CE6-C46892BD658D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1226F0B5-3300-4A13-B692-62C6DB407810", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4300:-:*:*:*:*:*:*:*", "matchCriteriaId": "EB77802D-96CB-49DB-A912-9DB901130F08", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4310_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FC21723E-18CF-4AC3-9EF7-0DC59D6438DF", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4310:-:*:*:*:*:*:*:*", "matchCriteriaId": "0FDF3ECD-A475-44D1-BF08-B1D60F33D163", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BB81B854-8606-4EAB-BCB1-C45AFF315F7F", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4320:-:*:*:*:*:*:*:*", "matchCriteriaId": "060083B0-E9E5-4694-94AB-3517B4B6E0C2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj301-1200_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F9C2854F-BDBC-42CB-AE2C-D2682B285EC1", "versionEndExcluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj301-1200:-:*:*:*:*:*:*:*", "matchCriteriaId": "3D279907-5CF4-416F-BE78-300FD52B5B2D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj301-1100_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "90EF11A3-0FC3-46C8-9AC7-90A6768149A3", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj301-1100:-:*:*:*:*:*:*:*", "matchCriteriaId": "6D92B425-000A-4A85-820E-E16B8AFF06B8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-1000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F7C4F791-6705-4501-AAAD-A08B8731A644", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-1000:-:*:*:*:*:*:*:*", "matchCriteriaId": "E5A77DA0-B22A-4C26-8E64-6F272CD420A3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-9000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D8EBA4D5-57A7-4AB4-80C8-B3AA0881438B", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-9000:-:*:*:*:*:*:*:*", "matchCriteriaId": "E3883A8C-C4EC-45F0-B164-0BADFF91E361", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj-pa3001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "902CECE1-A411-43D6-9FE6-C80D92F79909", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj-pa3001:-:*:*:*:*:*:*:*", "matchCriteriaId": "97E4422C-0758-4A41-B3C9-FB239E3440B6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj-pd3001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7F4612C4-A7B2-44CD-8138-18B5A0A537D5", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj-pd3001:-:*:*:*:*:*:*:*", "matchCriteriaId": "377396A7-4CDD-4768-AA23-A0B063962CC7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow an adjacent attacker who can analyze the communication between the controller and the specific software used by OMRON internally to cause a denial-of-service (DoS) condition or execute a malicious program." }, { "lang": "es", "value": "Se presenta una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n por captura-repetici\u00f3n en el controlador de automatizaci\u00f3n de M\u00e1quinas de la serie NX7 todos los modelos Versiones 1.28 y anteriores, en el controlador de automatizaci\u00f3n de M\u00e1quinas de la serie NX1 todos los modelos Versiones 1.48 y anteriores y en el controlador de automatizaci\u00f3n de M\u00e1quinas de la serie NJ todos los modelos Versiones 1.48 y anteriores, que puede permitir a un atacante adyacente que pueda analizar la comunicaci\u00f3n entre el controlador y el software espec\u00edfico usado por OMRON internamente causar una condici\u00f3n de denegaci\u00f3n de servicio (DoS) o ejecutar un programa malicioso" } ], "id": "CVE-2022-33971", "lastModified": "2024-11-21T07:08:41.690", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "MEDIUM", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "exploitabilityScore": 5.5, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 1.6, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2022-07-04T02:15:07.670", "references": [ { "source": "vultures@jpcert.or.jp", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "https://jvn.jp/en/vu/JVNVU97050784/index.html" }, { "source": "vultures@jpcert.or.jp", "tags": [ "Mitigation", "Vendor Advisory" ], "url": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-002_en.pdf" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "https://jvn.jp/en/vu/JVNVU97050784/index.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mitigation", "Vendor Advisory" ], "url": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-002_en.pdf" } ], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-294" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2022-07-26 22:15
Modified
2024-11-21 07:04
Severity ?
Summary
The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software (which compiles IEC 61131-3 conformant POU code to native machine code for execution by the PLC's runtime). The resulting machine code is executed by a runtime, typically controlled by a real-time operating system. The logic that is downloaded to the PLC does not seem to be cryptographically authenticated, allowing an attacker to manipulate transmitted object code to the PLC and execute arbitrary machine code on the processor of the PLC's CPU module in the context of the runtime. In the case of at least the NJ series, an RTOS and hardware combination is used that would potentially allow for memory protection and privilege separation and thus limit the impact of code execution. However, it was not confirmed whether these sufficiently segment the runtime from the rest of the RTOS.
References
▼ | URL | Tags | |
---|---|---|---|
cve@mitre.org | https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-02 | Third Party Advisory, US Government Resource | |
cve@mitre.org | https://www.forescout.com/blog/ | Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-02 | Third Party Advisory, US Government Resource | |
af854a3a-2127-422b-91ae-364da2661108 | https://www.forescout.com/blog/ | Third Party Advisory |
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1600_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E4F12068-1901-4BBF-972E-E1675987EE35", "versionEndExcluding": "1.29", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1600:-:*:*:*:*:*:*:*", "matchCriteriaId": "A613C260-184B-4131-B2EC-656D8322F86B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1620_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0F9094BC-9085-4BC8-89A4-DDD35B87CDD8", "versionEndExcluding": "1.29", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1620:-:*:*:*:*:*:*:*", "matchCriteriaId": "210D7FA7-18A3-45B7-976B-9DEDC59294C7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1700_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9A5FC714-3B8F-471E-B57E-9283259695CF", "versionEndExcluding": "1.29", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1700:-:*:*:*:*:*:*:*", "matchCriteriaId": "753A218D-C738-42E5-B523-ED7CACCAEC82", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1720_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "52701918-BD60-475B-8963-8544FB9BC1E4", "versionEndExcluding": "1.29", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1720:-:*:*:*:*:*:*:*", "matchCriteriaId": "2434BE7E-3E5D-48A9-838C-BCC6055135F9", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-z600_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "450F2854-E366-4D70-8B7E-44140590F59B", "versionEndExcluding": "1.29", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-z600:-:*:*:*:*:*:*:*", "matchCriteriaId": "90B7C106-4C14-4C0A-BA78-9A3DD63EF576", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-z700_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FBB2AA45-8B9B-4376-AA9E-1241DA568608", "versionEndExcluding": "1.29", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-z700:-:*:*:*:*:*:*:*", "matchCriteriaId": "36F25E10-A76C-4A16-B72B-4B9E572EDBAB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-1000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "46296F6D-FFE5-4BFD-859D-C5518AA273BD", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-1000:-:*:*:*:*:*:*:*", "matchCriteriaId": "E5A77DA0-B22A-4C26-8E64-6F272CD420A3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-1020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6FBB178B-ABF6-48B6-9A73-F99F8C3E88DF", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-1020:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A75CF5D-0ADE-448E-BF3C-8E2C268EE1BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-9000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "91C5A297-8C80-4A4D-849B-AB91BADDFB5F", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-9000:-:*:*:*:*:*:*:*", "matchCriteriaId": "E3883A8C-C4EC-45F0-B164-0BADFF91E361", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-9020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1712FCB6-4759-4124-9AC8-3DC8C5173B45", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-9020:-:*:*:*:*:*:*:*", "matchCriteriaId": "8696CE8A-C041-4EED-888B-36F2E499E67A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj301-1100_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "867EA94A-2DE2-473A-9EF5-4C4F84A949DF", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj301-1100:-:*:*:*:*:*:*:*", "matchCriteriaId": "6D92B425-000A-4A85-820E-E16B8AFF06B8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj301-1200_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C29A7920-4D29-4143-A8A7-A9B00B4C8038", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj301-1200:-:*:*:*:*:*:*:*", "matchCriteriaId": "3D279907-5CF4-416F-BE78-300FD52B5B2D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4A92B074-662B-4FB1-BEDC-7CE51360F63E", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1300:-:*:*:*:*:*:*:*", "matchCriteriaId": "2917E7F0-DAA8-4D3B-A5E4-FB0ACAEF02C5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "313049B9-C0CF-4D50-A083-BF83001DF7E4", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1320:-:*:*:*:*:*:*:*", "matchCriteriaId": "69D21068-A51D-48B2-BF17-68BC61737EBC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1340_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2079887D-43D8-4FFF-A54F-FA7357DC47FF", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1340:-:*:*:*:*:*:*:*", "matchCriteriaId": "1B381AE4-A769-403A-97FA-14FA5F8122CC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1400_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C88CFCB1-79AC-4A90-8D1C-2E71B5E37797", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1400:-:*:*:*:*:*:*:*", "matchCriteriaId": "E25F4D25-6ED0-41DD-B202-98F75FA092CD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1420_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "43E0C31B-AD01-4056-8201-C38FF55B114A", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1420:-:*:*:*:*:*:*:*", "matchCriteriaId": "148C6AE8-1480-4822-8E0B-1E8575246878", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1500_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BAC9F6F9-6988-494D-BAD4-0D851BD15EBD", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1500:-:*:*:*:*:*:*:*", "matchCriteriaId": "DD281699-D123-4301-9EDF-4BE249E24FF8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1520_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C74AC275-2592-4A76-9A50-18620FAFD8D8", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1520:-:*:*:*:*:*:*:*", "matchCriteriaId": "CBBE1648-D428-4A43-831D-AB3AF3F05739", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D4F00EEA-9D04-4D7A-BD3E-11530FB492A7", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4300:-:*:*:*:*:*:*:*", "matchCriteriaId": "EB77802D-96CB-49DB-A912-9DB901130F08", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4DE6230B-7F01-4F94-A7EA-675B63BF82E5", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4320:-:*:*:*:*:*:*:*", "matchCriteriaId": "060083B0-E9E5-4694-94AB-3517B4B6E0C2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4400_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3473072F-6535-44A7-AA5C-4DAF8C635E7C", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4400:-:*:*:*:*:*:*:*", "matchCriteriaId": "8D53224A-F4AE-42D5-9CE6-C46892BD658D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4500_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E32817C5-322A-40C6-A38D-CED8312EB350", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4500:-:*:*:*:*:*:*:*", "matchCriteriaId": "7E8F99DC-4992-4141-AD76-B8A0A690AD4D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-5300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CAB2C973-C5E1-4F4A-9390-BF0544FC0286", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-5300:-:*:*:*:*:*:*:*", "matchCriteriaId": "1FEF30DD-FCF0-499E-B5C2-4184C9A7E9D8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-5300-1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9FEFCEAD-F811-41DC-9493-648ED9DE48E5", "versionEndExcluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-5300-1:-:*:*:*:*:*:*:*", "matchCriteriaId": "D5EC53CE-17CD-428E-A750-A323BF5F0ABE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software (which compiles IEC 61131-3 conformant POU code to native machine code for execution by the PLC\u0027s runtime). The resulting machine code is executed by a runtime, typically controlled by a real-time operating system. The logic that is downloaded to the PLC does not seem to be cryptographically authenticated, allowing an attacker to manipulate transmitted object code to the PLC and execute arbitrary machine code on the processor of the PLC\u0027s CPU module in the context of the runtime. In the case of at least the NJ series, an RTOS and hardware combination is used that would potentially allow for memory protection and privilege separation and thus limit the impact of code execution. However, it was not confirmed whether these sufficiently segment the runtime from the rest of the RTOS." }, { "lang": "es", "value": "Los PLC de la familia de productos SYSMAC Nx de Omron (series NJ, NY, NX y PMAC) versiones hasta 18-05-2022, carecen de autenticaci\u00f3n criptogr\u00e1fica. Estos PLC son programados usando el software de ingenier\u00eda SYMAC Studio (que compila el c\u00f3digo POU conforme a la norma IEC 61131-3 en c\u00f3digo m\u00e1quina nativo para su ejecuci\u00f3n por el tiempo de ejecuci\u00f3n del PLC). El c\u00f3digo m\u00e1quina resultando es ejecutado por un tiempo de ejecuci\u00f3n, normalmente controlado por un sistema operativo en tiempo real. La l\u00f3gica que es descargada en el PLC no parece estar autenticada criptogr\u00e1ficamente, permitiendo a un atacante manipular el c\u00f3digo objeto transmitido al PLC y ejecutar c\u00f3digo m\u00e1quina arbitrario en el procesador del m\u00f3dulo CPU del PLC en el contexto del tiempo de ejecuci\u00f3n. En el caso de al menos la serie NJ, es usada una combinaci\u00f3n de RTOS y hardware que potencialmente permitir\u00eda la protecci\u00f3n de la memoria y la separaci\u00f3n de privilegios y, por tanto, limitar\u00eda el impacto de la ejecuci\u00f3n de c\u00f3digo. Sin embargo, no ha sido confirmado si \u00e9stos segmentan suficientemente el tiempo de ejecuci\u00f3n del resto del RTOS." } ], "id": "CVE-2022-31206", "lastModified": "2024-11-21T07:04:07.527", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2022-07-26T22:15:11.400", "references": [ { "source": "cve@mitre.org", "tags": [ "Third Party Advisory", "US Government Resource" ], "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-02" }, { "source": "cve@mitre.org", "tags": [ "Third Party Advisory" ], "url": "https://www.forescout.com/blog/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory", "US Government Resource" ], "url": "https://www.cisa.gov/uscert/ics/advisories/icsa-22-179-02" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "https://www.forescout.com/blog/" } ], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-347" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2022-07-04 02:15
Modified
2024-11-21 07:07
Severity ?
Summary
Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who can analyze the communication between the affected controller and automation software 'Sysmac Studio' and/or a Programmable Terminal (PT) to access the controller.
References
▼ | URL | Tags | |
---|---|---|---|
vultures@jpcert.or.jp | https://jvn.jp/en/vu/JVNVU97050784/index.html | Third Party Advisory, VDB Entry | |
vultures@jpcert.or.jp | https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf | Mitigation, Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://jvn.jp/en/vu/JVNVU97050784/index.html | Third Party Advisory, VDB Entry | |
af854a3a-2127-422b-91ae-364da2661108 | https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf | Mitigation, Vendor Advisory |
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1600_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C32C9A6D-2AF6-4005-AD33-E54B2726A769", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1600:-:*:*:*:*:*:*:*", "matchCriteriaId": "A613C260-184B-4131-B2EC-656D8322F86B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1700_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "929C2ED9-5BBD-4585-A95F-A3C5F12C5376", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1700:-:*:*:*:*:*:*:*", "matchCriteriaId": "753A218D-C738-42E5-B523-ED7CACCAEC82", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-z700_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B87C2BC4-8CDE-42CA-B0D3-EEBEAD0BCECF", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-z700:-:*:*:*:*:*:*:*", "matchCriteriaId": "36F25E10-A76C-4A16-B72B-4B9E572EDBAB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-z600_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "586D8ACC-BD51-403C-AAF6-55392741D582", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-z600:-:*:*:*:*:*:*:*", "matchCriteriaId": "90B7C106-4C14-4C0A-BA78-9A3DD63EF576", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1720_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "67236B5C-8045-4413-8767-1F0904EF6E7F", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1720:-:*:*:*:*:*:*:*", "matchCriteriaId": "2434BE7E-3E5D-48A9-838C-BCC6055135F9", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1620_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1805212B-75E3-4443-A7D4-B889EA53721A", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1620:-:*:*:*:*:*:*:*", "matchCriteriaId": "210D7FA7-18A3-45B7-976B-9DEDC59294C7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1200_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "91116EDD-1D61-4D78-9367-C78E80E85BE3", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1200:-:*:*:*:*:*:*:*", "matchCriteriaId": "D8A6528B-2160-4CE4-88B2-EC69DB5797B4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1100_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EEA800B1-6E43-45C8-833E-744831490B98", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1100:-:*:*:*:*:*:*:*", "matchCriteriaId": "A1E68759-07B1-4F7B-8EF8-0429C8CFCAAF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "509A80E2-0FE2-4E65-A276-351953EA403D", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1000:-:*:*:*:*:*:*:*", "matchCriteriaId": "D01F33E2-E10C-4B3F-9326-7022924423DB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1220_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D3A572C4-8EDA-4A4D-9358-9E2313F9D71A", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1220:-:*:*:*:*:*:*:*", "matchCriteriaId": "FE463BB1-BE67-4D80-8FE7-85F960945AF5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1120_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "960BC2F9-7B36-419A-BEF6-1895666422A2", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1120:-:*:*:*:*:*:*:*", "matchCriteriaId": "E72347A8-8725-4DAB-9D2C-609072A4E904", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E2F70AA8-7DB0-415F-AB71-4F527E930C56", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1020:-:*:*:*:*:*:*:*", "matchCriteriaId": "B1A91E22-8F08-4470-BC4A-14D25A827607", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-9020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "644FC209-89BD-46E5-BD08-1A9518200AF4", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-9020:-:*:*:*:*:*:*:*", "matchCriteriaId": "34CE73C8-BF67-4BC3-81B2-275393441C91", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-1140dt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "53B955C2-94EE-4C9A-9858-B38AF619640A", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-1140dt:-:*:*:*:*:*:*:*", "matchCriteriaId": "BFF59B0A-C08C-4D56-B301-631DD155BEF4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-1140dt1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B73A630B-5A24-459F-80E5-E88C0D3C04BD", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-1140dt1:-:*:*:*:*:*:*:*", "matchCriteriaId": "63EEFB13-8B20-4A42-8511-98C4C8E045FA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-1040dt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "29BDE27D-6AFE-459A-B368-4D59BF2112EB", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-1040dt:-:*:*:*:*:*:*:*", "matchCriteriaId": "A7EF898A-8273-4044-8F4B-B2082294749F", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-1040dt1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CD05B298-12C5-48B7-814D-62CA3DD6623A", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-1040dt1:-:*:*:*:*:*:*:*", "matchCriteriaId": "B8DD457B-3E36-4C10-B34F-21CD0B931459", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-9024dt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5C0048B2-460B-4795-A23F-B83EC8830900", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-9024dt:-:*:*:*:*:*:*:*", "matchCriteriaId": "4B1E7DBC-6211-4503-9154-D0BD0FA3BE95", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-9024dt1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BB34E3A4-B7AF-461F-BA78-48C496B064D6", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-9024dt1:-:*:*:*:*:*:*:*", "matchCriteriaId": "F193D7DE-97C1-4883-871D-78AC7FCB9B14", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-cif01_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D2279FB9-11F5-4846-92C9-C657E36D7B02", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-cif01:-:*:*:*:*:*:*:*", "matchCriteriaId": "C9E45E4A-447D-4DE9-AC15-50BD2DEC5AAB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-cif11_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0E1F7962-856D-4C94-A3FE-A14591B5B982", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-cif11:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA6772B4-5B9D-4642-9DA6-5595C92895C4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-cif12_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "60836E6B-91EC-44A7-8FFF-535A32A83986", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-cif12:-:*:*:*:*:*:*:*", "matchCriteriaId": "BD3B3071-1C48-4AD0-9C82-59A16F52944D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-adb21_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "92D1E782-1625-41E0-81C2-F247628B1081", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-adb21:-:*:*:*:*:*:*:*", "matchCriteriaId": "148C75FA-08F5-401A-B4E9-989ED80AF3EC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-dab21v_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7E6F2CDD-7D0F-480E-9925-8A6F2B1D2825", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-dab21v:-:*:*:*:*:*:*:*", "matchCriteriaId": "BA779FC7-7C37-411C-BFD3-EE9B87E8D861", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-mab221_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F88219CC-5788-4B68-95C7-1D6746CCF5C7", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-mab221:-:*:*:*:*:*:*:*", "matchCriteriaId": "48E3688A-B3EE-441E-A16A-52FC683D4F1D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1500_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "03C70E33-A661-4974-A0D4-935C6EE1CB7A", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1500:-:*:*:*:*:*:*:*", "matchCriteriaId": "DD281699-D123-4301-9EDF-4BE249E24FF8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-140_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B4A80DE2-ECC9-4B35-B999-57573D386581", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-140:-:*:*:*:*:*:*:*", "matchCriteriaId": "E4824951-49CB-4E85-A736-28A72C514FB3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AD94505F-4294-4BF2-8A2F-13FC419D3D96", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1300:-:*:*:*:*:*:*:*", "matchCriteriaId": "2917E7F0-DAA8-4D3B-A5E4-FB0ACAEF02C5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r500_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E01A5FE5-B310-4C46-93FB-A6A8B492E179", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r500:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A1BA508-3DBE-46C4-B72C-312AC3403C27", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r520_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CDEDFECF-1490-4B47-BD5A-54F560C80CF4", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r520:-:*:*:*:*:*:*:*", "matchCriteriaId": "36BDD615-7933-4EF5-B2E5-68EB4FA776B7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r400_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B8FB4EB9-6E39-423B-84EF-B97698F896F0", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r400:-:*:*:*:*:*:*:*", "matchCriteriaId": "5A453709-E9EE-4DD8-8638-04752B9DFB0C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r420_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BD6DAE59-9863-44EE-97CC-503B980FB9AA", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r420:-:*:*:*:*:*:*:*", "matchCriteriaId": "C264C95F-F8CE-4EC1-B5A5-71998F0A75C3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1B4F9EF2-6C73-40AA-AF3B-BCCDFAF92E0A", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r300:-:*:*:*:*:*:*:*", "matchCriteriaId": "A8A4809E-770F-4D7B-A532-37160D8A3943", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "84C41F6C-7B86-4823-8214-9C244283C3AE", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r320:-:*:*:*:*:*:*:*", "matchCriteriaId": "32E135F9-CB75-49AF-B7C3-25E8EA3AB991", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-5300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6A1EC714-602B-4946-9857-EA601CEE8504", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-5300:-:*:*:*:*:*:*:*", "matchCriteriaId": "1FEF30DD-FCF0-499E-B5C2-4184C9A7E9D8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1520_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2BA40F4B-9EA2-416C-876C-714927FF9F32", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1520:-:*:*:*:*:*:*:*", "matchCriteriaId": "CBBE1648-D428-4A43-831D-AB3AF3F05739", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1420_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F22BED01-FC93-49D6-8623-053EE4327EAB", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1420:-:*:*:*:*:*:*:*", "matchCriteriaId": "148C6AE8-1480-4822-8E0B-1E8575246878", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "56A035E5-FBAD-44D1-879E-9C4062DF02B4", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1320:-:*:*:*:*:*:*:*", "matchCriteriaId": "69D21068-A51D-48B2-BF17-68BC61737EBC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-1020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D7E91BEB-06D4-4B01-8BC6-B252F299EBB0", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-1020:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A75CF5D-0ADE-448E-BF3C-8E2C268EE1BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-9020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1CB51A57-B840-4E4E-A970-B95E61B9D325", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-9020:-:*:*:*:*:*:*:*", "matchCriteriaId": "8696CE8A-C041-4EED-888B-36F2E499E67A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1340_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1E7ADA83-1E1B-459C-966C-00DD46B96198", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1340:-:*:*:*:*:*:*:*", "matchCriteriaId": "1B381AE4-A769-403A-97FA-14FA5F8122CC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4500_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E19F9721-B79A-4C5D-8414-86C709D4C292", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4500:-:*:*:*:*:*:*:*", "matchCriteriaId": "7E8F99DC-4992-4141-AD76-B8A0A690AD4D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4400_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7124BF89-F495-4C5D-BBC8-7FFF4F160B1D", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4400:-:*:*:*:*:*:*:*", "matchCriteriaId": "8D53224A-F4AE-42D5-9CE6-C46892BD658D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1226F0B5-3300-4A13-B692-62C6DB407810", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4300:-:*:*:*:*:*:*:*", "matchCriteriaId": "EB77802D-96CB-49DB-A912-9DB901130F08", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4310_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FC21723E-18CF-4AC3-9EF7-0DC59D6438DF", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4310:-:*:*:*:*:*:*:*", "matchCriteriaId": "0FDF3ECD-A475-44D1-BF08-B1D60F33D163", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BB81B854-8606-4EAB-BCB1-C45AFF315F7F", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4320:-:*:*:*:*:*:*:*", "matchCriteriaId": "060083B0-E9E5-4694-94AB-3517B4B6E0C2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj301-1200_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F9C2854F-BDBC-42CB-AE2C-D2682B285EC1", "versionEndExcluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj301-1200:-:*:*:*:*:*:*:*", "matchCriteriaId": "3D279907-5CF4-416F-BE78-300FD52B5B2D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj301-1100_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "90EF11A3-0FC3-46C8-9AC7-90A6768149A3", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj301-1100:-:*:*:*:*:*:*:*", "matchCriteriaId": "6D92B425-000A-4A85-820E-E16B8AFF06B8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-1000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F7C4F791-6705-4501-AAAD-A08B8731A644", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-1000:-:*:*:*:*:*:*:*", "matchCriteriaId": "E5A77DA0-B22A-4C26-8E64-6F272CD420A3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-9000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D8EBA4D5-57A7-4AB4-80C8-B3AA0881438B", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-9000:-:*:*:*:*:*:*:*", "matchCriteriaId": "E3883A8C-C4EC-45F0-B164-0BADFF91E361", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj-pa3001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "902CECE1-A411-43D6-9FE6-C80D92F79909", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj-pa3001:-:*:*:*:*:*:*:*", "matchCriteriaId": "97E4422C-0758-4A41-B3C9-FB239E3440B6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj-pd3001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7F4612C4-A7B2-44CD-8138-18B5A0A537D5", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj-pd3001:-:*:*:*:*:*:*:*", "matchCriteriaId": "377396A7-4CDD-4768-AA23-A0B063962CC7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:omron:sysmac_studio:*:*:*:*:*:*:*:*", "matchCriteriaId": "D0C9C903-58E8-4AAD-9D8B-98EFB3CD5261", "versionEndIncluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:na5-15w_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "26005582-DD0D-45F3-8FA6-4B1A5DB72B1A", "versionEndIncluding": "1.15", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:na5-15w:-:*:*:*:*:*:*:*", "matchCriteriaId": "A9B1DD5F-1260-4FF1-BE5F-42CF2748AA83", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:na5-12w_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4FA1DFB3-0E4A-4864-81E7-505064C6C6E4", "versionEndIncluding": "1.15", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:na5-12w:-:*:*:*:*:*:*:*", "matchCriteriaId": "79B75CC6-944C-4403-912B-EA58932B6951", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:na5-9w_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B401EFE5-F41D-4587-8401-DFA4464A7926", "versionEndIncluding": "1.15", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:na5-9w:-:*:*:*:*:*:*:*", "matchCriteriaId": "D0E96DE9-7831-463C-8D08-4D632BBF948C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:na5-7w_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D90818CE-751B-4DF2-9CCC-0178E7349453", "versionEndIncluding": "1.15", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:na5-7w:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE59D9EE-0CF7-4088-B872-B9B0063DD01C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software \u0027Sysmac Studio\u0027 all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who can analyze the communication between the affected controller and automation software \u0027Sysmac Studio\u0027 and/or a Programmable Terminal (PT) to access the controller." }, { "lang": "es", "value": "Se presenta una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n por captura-repetici\u00f3n en el controlador de automatizaci\u00f3n de M\u00e1quinas de la serie NJ todos los modelos Versiones 1.48 y anteriores, el controlador de automatizaci\u00f3n de M\u00e1quinas de la serie NX7 todos los modelos Versiones 1.28 y anteriores, el controlador de automatizaci\u00f3n de M\u00e1quinas de la serie NX1 todos los modelos Versiones 1.48 y anteriores, el software de automatizaci\u00f3n \"Sysmac Studio\" todos los modelos Versiones 1. 49 y anteriores, y Terminal Programable (PT) serie NA5-15W/NA5-12W/NA5-9W/NA5-7W modelos Runtime Versiones 1.15 y anteriores, lo que puede permitir a un atacante remoto que pueda analizar la comunicaci\u00f3n entre el controlador afectado y el software de automatizaci\u00f3n \"Sysmac Studio\" y/o un Terminal Programable (PT) acceder al controlador" } ], "id": "CVE-2022-33208", "lastModified": "2024-11-21T07:07:43.217", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2022-07-04T02:15:07.570", "references": [ { "source": "vultures@jpcert.or.jp", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "https://jvn.jp/en/vu/JVNVU97050784/index.html" }, { "source": "vultures@jpcert.or.jp", "tags": [ "Mitigation", "Vendor Advisory" ], "url": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "https://jvn.jp/en/vu/JVNVU97050784/index.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mitigation", "Vendor Advisory" ], "url": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf" } ], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-294" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2024-06-24 15:15
Modified
2024-11-21 09:17
Severity ?
Summary
Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product may not be able to detect the alteration.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-1000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B7F48F82-0457-4C2A-86A2-3E23B03C54C8", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-1000:-:*:*:*:*:*:*:*", "matchCriteriaId": "E5A77DA0-B22A-4C26-8E64-6F272CD420A3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-1020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5080EE99-F7FA-4B09-8F98-A7D99D9FEB4D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-1020:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A75CF5D-0ADE-448E-BF3C-8E2C268EE1BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-9000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "20DA6B5C-BEF1-4B54-90FC-29A4844A93B3", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-9000:-:*:*:*:*:*:*:*", "matchCriteriaId": "E3883A8C-C4EC-45F0-B164-0BADFF91E361", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-9020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EF714AA6-6329-45ED-B470-EA843D3021DF", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-9020:-:*:*:*:*:*:*:*", "matchCriteriaId": "8696CE8A-C041-4EED-888B-36F2E499E67A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj301-1100_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8E0D3610-E91F-407A-BBF9-AE38F1587C84", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj301-1100:-:*:*:*:*:*:*:*", "matchCriteriaId": "6D92B425-000A-4A85-820E-E16B8AFF06B8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj301-1200_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E1922748-E966-4EA6-9E18-C9CD0B0EF377", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj301-1200:-:*:*:*:*:*:*:*", "matchCriteriaId": "3D279907-5CF4-416F-BE78-300FD52B5B2D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EADFDCF4-5A4A-4997-912A-84719A42566A", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1300:-:*:*:*:*:*:*:*", "matchCriteriaId": "2917E7F0-DAA8-4D3B-A5E4-FB0ACAEF02C5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E3111B8D-1AE3-444F-9CAF-52DCDE83839B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1320:-:*:*:*:*:*:*:*", "matchCriteriaId": "69D21068-A51D-48B2-BF17-68BC61737EBC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1340_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "77EA35C3-7330-4C24-B5BF-9ACCB21C5B97", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1340:-:*:*:*:*:*:*:*", "matchCriteriaId": "1B381AE4-A769-403A-97FA-14FA5F8122CC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-140_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F90CA15C-80F2-473C-B39C-09A21A3A7105", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-140:-:*:*:*:*:*:*:*", "matchCriteriaId": "E4824951-49CB-4E85-A736-28A72C514FB3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1400_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1535738D-3EDC-4D69-82F5-D4116BD65019", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1400:-:*:*:*:*:*:*:*", "matchCriteriaId": "E25F4D25-6ED0-41DD-B202-98F75FA092CD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1420_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3F991704-F704-4758-999C-3C228B5E5295", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1420:-:*:*:*:*:*:*:*", "matchCriteriaId": "148C6AE8-1480-4822-8E0B-1E8575246878", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1500_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0356B5FF-5263-41CF-8B9B-F28445E97391", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1500:-:*:*:*:*:*:*:*", "matchCriteriaId": "DD281699-D123-4301-9EDF-4BE249E24FF8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1520_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "658B14C7-4DEB-4EE5-BB9A-71FCE52EC298", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1520:-:*:*:*:*:*:*:*", "matchCriteriaId": "CBBE1648-D428-4A43-831D-AB3AF3F05739", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "206C4DDA-753A-4584-9762-ECBDB378335E", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4300:-:*:*:*:*:*:*:*", "matchCriteriaId": "EB77802D-96CB-49DB-A912-9DB901130F08", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4310_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8E31DA56-8DB7-4B8B-B699-C7656F89ED70", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4310:-:*:*:*:*:*:*:*", "matchCriteriaId": "0FDF3ECD-A475-44D1-BF08-B1D60F33D163", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "42EA2073-E34D-48A2-9AA7-02C247F2F356", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4320:-:*:*:*:*:*:*:*", "matchCriteriaId": "060083B0-E9E5-4694-94AB-3517B4B6E0C2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4400_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3F3A7B0C-E7F3-416F-A0B0-233FEC0F4F89", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4400:-:*:*:*:*:*:*:*", "matchCriteriaId": "8D53224A-F4AE-42D5-9CE6-C46892BD658D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4500_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F45D16ED-5CC7-4B06-9FEA-57F42B8B9E93", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4500:-:*:*:*:*:*:*:*", "matchCriteriaId": "7E8F99DC-4992-4141-AD76-B8A0A690AD4D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-5300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B6243AD3-C075-4BD5-ABB2-4B7E2D389267", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-5300:-:*:*:*:*:*:*:*", "matchCriteriaId": "1FEF30DD-FCF0-499E-B5C2-4184C9A7E9D8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-5300-1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "452BC347-5D07-43B5-87A2-C0BB498A288A", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-5300-1:-:*:*:*:*:*:*:*", "matchCriteriaId": "D5EC53CE-17CD-428E-A750-A323BF5F0ABE", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C6968524-3D63-49F5-A318-8AC62049FB4B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r300:-:*:*:*:*:*:*:*", "matchCriteriaId": "A8A4809E-770F-4D7B-A532-37160D8A3943", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4143EFEF-1B06-4C12-BED5-D86915DD62F6", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r320:-:*:*:*:*:*:*:*", "matchCriteriaId": "32E135F9-CB75-49AF-B7C3-25E8EA3AB991", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r400_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BD74F929-989C-4DA4-B39D-BBC54529F241", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r400:-:*:*:*:*:*:*:*", "matchCriteriaId": "5A453709-E9EE-4DD8-8638-04752B9DFB0C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r420_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EAA2B390-49D8-4F03-8AA0-1847CE7108A4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r420:-:*:*:*:*:*:*:*", "matchCriteriaId": "C264C95F-F8CE-4EC1-B5A5-71998F0A75C3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r500_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E1707EFC-D40B-4B27-9FDF-91FC25CD19D9", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r500:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A1BA508-3DBE-46C4-B72C-312AC3403C27", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r520_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1EE8A270-ED27-4629-9786-AAD103F55C03", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r520:-:*:*:*:*:*:*:*", "matchCriteriaId": "36BDD615-7933-4EF5-B2E5-68EB4FA776B7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj-pa3001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DC9C8F30-E7D4-41C4-8385-CBE00F507FC4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj-pa3001:-:*:*:*:*:*:*:*", "matchCriteriaId": "97E4422C-0758-4A41-B3C9-FB239E3440B6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj-pd3001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "76159124-1CE9-4908-BC95-F9186638C6E1", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj-pd3001:-:*:*:*:*:*:*:*", "matchCriteriaId": "377396A7-4CDD-4768-AA23-A0B063962CC7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CBB54650-6133-4FA4-A3B1-EDB0B90C18AB", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1000:-:*:*:*:*:*:*:*", "matchCriteriaId": "D01F33E2-E10C-4B3F-9326-7022924423DB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B91214D1-290D-4199-B02A-387B9771E8EC", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1020:-:*:*:*:*:*:*:*", "matchCriteriaId": "B1A91E22-8F08-4470-BC4A-14D25A827607", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1100_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8C5123EE-2568-42B2-88CC-3DF44DE92C53", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1100:-:*:*:*:*:*:*:*", "matchCriteriaId": "A1E68759-07B1-4F7B-8EF8-0429C8CFCAAF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1120_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7D19E1D1-215B-4ADF-BABA-9407B7C9081B", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1120:-:*:*:*:*:*:*:*", "matchCriteriaId": "E72347A8-8725-4DAB-9D2C-609072A4E904", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1200_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A9741D38-910E-4FEB-B843-19A70C44ECE2", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1200:-:*:*:*:*:*:*:*", "matchCriteriaId": "D8A6528B-2160-4CE4-88B2-EC69DB5797B4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1220_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "929EDFEF-F348-4071-AB5F-03FDAE0C5D9C", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1220:-:*:*:*:*:*:*:*", "matchCriteriaId": "FE463BB1-BE67-4D80-8FE7-85F960945AF5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-9000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C80B82AF-14CC-4053-B9DC-D6F85A6A7AD8", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-9000:-:*:*:*:*:*:*:*", "matchCriteriaId": "0A9DDB7B-213B-41F3-ABC0-23A4834C3449", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-9020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "35FBF42A-F83D-4D91-9DAC-EE7E6D87A40D", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-9020:-:*:*:*:*:*:*:*", "matchCriteriaId": "34CE73C8-BF67-4BC3-81B2-275393441C91", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-1040dt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "773B8213-8022-4072-BCA2-1523932F6406", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-1040dt:-:*:*:*:*:*:*:*", "matchCriteriaId": "A7EF898A-8273-4044-8F4B-B2082294749F", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-1040dt1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D41CB601-640B-467A-A0CD-CB148E60BECD", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-1040dt1:-:*:*:*:*:*:*:*", "matchCriteriaId": "B8DD457B-3E36-4C10-B34F-21CD0B931459", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-1140dt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4892B707-7300-4D9C-B0EE-8555B8CA0BE0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-1140dt:-:*:*:*:*:*:*:*", "matchCriteriaId": "BFF59B0A-C08C-4D56-B301-631DD155BEF4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-1140dt1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2DE9D5AD-FD32-4A6D-8803-DD42F4AEDC26", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-1140dt1:-:*:*:*:*:*:*:*", "matchCriteriaId": "63EEFB13-8B20-4A42-8511-98C4C8E045FA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-9024dt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8CE55F43-8915-44DF-9D6D-60A5E641CA40", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-9024dt:-:*:*:*:*:*:*:*", "matchCriteriaId": "4B1E7DBC-6211-4503-9154-D0BD0FA3BE95", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-9024dt1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "98C8A4BF-EC67-45DC-A5C5-B64E913DDB59", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-9024dt1:-:*:*:*:*:*:*:*", "matchCriteriaId": "F193D7DE-97C1-4883-871D-78AC7FCB9B14", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-adb21_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A52D6BFF-B924-4906-9EBD-5361FE1A31C3", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-adb21:-:*:*:*:*:*:*:*", "matchCriteriaId": "148C75FA-08F5-401A-B4E9-989ED80AF3EC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-cif01_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "48B718F4-D890-4805-A96E-F6744BBFEE51", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-cif01:-:*:*:*:*:*:*:*", "matchCriteriaId": "C9E45E4A-447D-4DE9-AC15-50BD2DEC5AAB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-cif11_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A878E8B7-F395-4291-8C0D-9C679C5763D9", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-cif11:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA6772B4-5B9D-4642-9DA6-5595C92895C4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-cif12_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "986EFF21-3FEE-498B-9BBC-0554904EC32F", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-cif12:-:*:*:*:*:*:*:*", "matchCriteriaId": "BD3B3071-1C48-4AD0-9C82-59A16F52944D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-dab21v_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "59CCAD9B-BF84-4BDE-A010-6FEA8E02BC1E", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-dab21v:-:*:*:*:*:*:*:*", "matchCriteriaId": "BA779FC7-7C37-411C-BFD3-EE9B87E8D861", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-mab221_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "68F200C5-CA76-414E-B31B-5A3B45005B40", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-mab221:-:*:*:*:*:*:*:*", "matchCriteriaId": "48E3688A-B3EE-441E-A16A-52FC683D4F1D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1600_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "65BBD8C2-05CD-4D95-8868-FC950B3C5EB3", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1600:-:*:*:*:*:*:*:*", "matchCriteriaId": "A613C260-184B-4131-B2EC-656D8322F86B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1620_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C7722B2B-C42E-4DE6-A5EF-93F58407F81C", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1620:-:*:*:*:*:*:*:*", "matchCriteriaId": "210D7FA7-18A3-45B7-976B-9DEDC59294C7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1700_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1ED4966C-750E-4B50-AA1E-DCC510E27BB0", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1700:-:*:*:*:*:*:*:*", "matchCriteriaId": "753A218D-C738-42E5-B523-ED7CACCAEC82", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1720_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "979C93C8-F43B-466D-B85C-50C96B6A1420", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1720:-:*:*:*:*:*:*:*", "matchCriteriaId": "2434BE7E-3E5D-48A9-838C-BCC6055135F9", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-z600_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CAE54224-E502-43DC-8598-E8D1AB9DDD82", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-z600:-:*:*:*:*:*:*:*", "matchCriteriaId": "90B7C106-4C14-4C0A-BA78-9A3DD63EF576", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-z700_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "28A3BECD-254C-4E01-8B43-3FDFDCFCE8F5", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-z700:-:*:*:*:*:*:*:*", "matchCriteriaId": "36F25E10-A76C-4A16-B72B-4B9E572EDBAB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product may not be able to detect the alteration." }, { "lang": "es", "value": "Existe un problema de verificaci\u00f3n insuficiente de la autenticidad de los datos en todas las versiones de la CPU serie NJ y en todas las versiones de la CPU serie NX. Si se modifica un programa de usuario en el producto afectado, es posible que el producto no pueda detectar la alteraci\u00f3n." } ], "id": "CVE-2024-33687", "lastModified": "2024-11-21T09:17:24.363", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2024-06-24T15:15:11.590", "references": [ { "source": "vultures@jpcert.or.jp", "tags": [ "Third Party Advisory" ], "url": "https://jvn.jp/en/vu/JVNVU92504444/" }, { "source": "vultures@jpcert.or.jp", "tags": [ "Vendor Advisory" ], "url": "https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-004_en.pdf" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory" ], "url": "https://jvn.jp/en/vu/JVNVU92504444/" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-004_en.pdf" } ], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-345" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2022-07-04 02:15
Modified
2024-11-21 07:08
Severity ?
Summary
Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who successfully obtained the user credentials by analyzing the affected product to access the controller.
References
▼ | URL | Tags | |
---|---|---|---|
vultures@jpcert.or.jp | https://jvn.jp/en/vu/JVNVU97050784/index.html | Third Party Advisory, VDB Entry | |
vultures@jpcert.or.jp | https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf | Mitigation, Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://jvn.jp/en/vu/JVNVU97050784/index.html | Third Party Advisory, VDB Entry | |
af854a3a-2127-422b-91ae-364da2661108 | https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf | Mitigation, Vendor Advisory |
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1600_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C32C9A6D-2AF6-4005-AD33-E54B2726A769", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1600:-:*:*:*:*:*:*:*", "matchCriteriaId": "A613C260-184B-4131-B2EC-656D8322F86B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1700_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "929C2ED9-5BBD-4585-A95F-A3C5F12C5376", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1700:-:*:*:*:*:*:*:*", "matchCriteriaId": "753A218D-C738-42E5-B523-ED7CACCAEC82", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-z700_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B87C2BC4-8CDE-42CA-B0D3-EEBEAD0BCECF", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-z700:-:*:*:*:*:*:*:*", "matchCriteriaId": "36F25E10-A76C-4A16-B72B-4B9E572EDBAB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-z600_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "586D8ACC-BD51-403C-AAF6-55392741D582", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-z600:-:*:*:*:*:*:*:*", "matchCriteriaId": "90B7C106-4C14-4C0A-BA78-9A3DD63EF576", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1720_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "67236B5C-8045-4413-8767-1F0904EF6E7F", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1720:-:*:*:*:*:*:*:*", "matchCriteriaId": "2434BE7E-3E5D-48A9-838C-BCC6055135F9", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx701-1620_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1805212B-75E3-4443-A7D4-B889EA53721A", "versionEndIncluding": "1.28", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx701-1620:-:*:*:*:*:*:*:*", "matchCriteriaId": "210D7FA7-18A3-45B7-976B-9DEDC59294C7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1200_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "91116EDD-1D61-4D78-9367-C78E80E85BE3", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1200:-:*:*:*:*:*:*:*", "matchCriteriaId": "D8A6528B-2160-4CE4-88B2-EC69DB5797B4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1100_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EEA800B1-6E43-45C8-833E-744831490B98", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1100:-:*:*:*:*:*:*:*", "matchCriteriaId": "A1E68759-07B1-4F7B-8EF8-0429C8CFCAAF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "509A80E2-0FE2-4E65-A276-351953EA403D", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1000:-:*:*:*:*:*:*:*", "matchCriteriaId": "D01F33E2-E10C-4B3F-9326-7022924423DB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1220_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D3A572C4-8EDA-4A4D-9358-9E2313F9D71A", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1220:-:*:*:*:*:*:*:*", "matchCriteriaId": "FE463BB1-BE67-4D80-8FE7-85F960945AF5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1120_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "960BC2F9-7B36-419A-BEF6-1895666422A2", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1120:-:*:*:*:*:*:*:*", "matchCriteriaId": "E72347A8-8725-4DAB-9D2C-609072A4E904", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-1020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E2F70AA8-7DB0-415F-AB71-4F527E930C56", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-1020:-:*:*:*:*:*:*:*", "matchCriteriaId": "B1A91E22-8F08-4470-BC4A-14D25A827607", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx102-9020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "644FC209-89BD-46E5-BD08-1A9518200AF4", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx102-9020:-:*:*:*:*:*:*:*", "matchCriteriaId": "34CE73C8-BF67-4BC3-81B2-275393441C91", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-1140dt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "53B955C2-94EE-4C9A-9858-B38AF619640A", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-1140dt:-:*:*:*:*:*:*:*", "matchCriteriaId": "BFF59B0A-C08C-4D56-B301-631DD155BEF4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-1140dt1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B73A630B-5A24-459F-80E5-E88C0D3C04BD", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-1140dt1:-:*:*:*:*:*:*:*", "matchCriteriaId": "63EEFB13-8B20-4A42-8511-98C4C8E045FA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-1040dt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "29BDE27D-6AFE-459A-B368-4D59BF2112EB", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-1040dt:-:*:*:*:*:*:*:*", "matchCriteriaId": "A7EF898A-8273-4044-8F4B-B2082294749F", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-1040dt1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CD05B298-12C5-48B7-814D-62CA3DD6623A", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-1040dt1:-:*:*:*:*:*:*:*", "matchCriteriaId": "B8DD457B-3E36-4C10-B34F-21CD0B931459", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-9024dt_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5C0048B2-460B-4795-A23F-B83EC8830900", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-9024dt:-:*:*:*:*:*:*:*", "matchCriteriaId": "4B1E7DBC-6211-4503-9154-D0BD0FA3BE95", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1p2-9024dt1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BB34E3A4-B7AF-461F-BA78-48C496B064D6", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1p2-9024dt1:-:*:*:*:*:*:*:*", "matchCriteriaId": "F193D7DE-97C1-4883-871D-78AC7FCB9B14", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-cif01_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D2279FB9-11F5-4846-92C9-C657E36D7B02", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-cif01:-:*:*:*:*:*:*:*", "matchCriteriaId": "C9E45E4A-447D-4DE9-AC15-50BD2DEC5AAB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-cif11_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0E1F7962-856D-4C94-A3FE-A14591B5B982", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-cif11:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA6772B4-5B9D-4642-9DA6-5595C92895C4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-cif12_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "60836E6B-91EC-44A7-8FFF-535A32A83986", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-cif12:-:*:*:*:*:*:*:*", "matchCriteriaId": "BD3B3071-1C48-4AD0-9C82-59A16F52944D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-adb21_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "92D1E782-1625-41E0-81C2-F247628B1081", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-adb21:-:*:*:*:*:*:*:*", "matchCriteriaId": "148C75FA-08F5-401A-B4E9-989ED80AF3EC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-dab21v_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7E6F2CDD-7D0F-480E-9925-8A6F2B1D2825", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-dab21v:-:*:*:*:*:*:*:*", "matchCriteriaId": "BA779FC7-7C37-411C-BFD3-EE9B87E8D861", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nx1w-mab221_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F88219CC-5788-4B68-95C7-1D6746CCF5C7", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nx1w-mab221:-:*:*:*:*:*:*:*", "matchCriteriaId": "48E3688A-B3EE-441E-A16A-52FC683D4F1D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1500_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "03C70E33-A661-4974-A0D4-935C6EE1CB7A", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1500:-:*:*:*:*:*:*:*", "matchCriteriaId": "DD281699-D123-4301-9EDF-4BE249E24FF8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-140_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B4A80DE2-ECC9-4B35-B999-57573D386581", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-140:-:*:*:*:*:*:*:*", "matchCriteriaId": "E4824951-49CB-4E85-A736-28A72C514FB3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AD94505F-4294-4BF2-8A2F-13FC419D3D96", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1300:-:*:*:*:*:*:*:*", "matchCriteriaId": "2917E7F0-DAA8-4D3B-A5E4-FB0ACAEF02C5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r500_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E01A5FE5-B310-4C46-93FB-A6A8B492E179", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r500:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A1BA508-3DBE-46C4-B72C-312AC3403C27", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r520_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CDEDFECF-1490-4B47-BD5A-54F560C80CF4", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r520:-:*:*:*:*:*:*:*", "matchCriteriaId": "36BDD615-7933-4EF5-B2E5-68EB4FA776B7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r400_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B8FB4EB9-6E39-423B-84EF-B97698F896F0", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r400:-:*:*:*:*:*:*:*", "matchCriteriaId": "5A453709-E9EE-4DD8-8638-04752B9DFB0C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r420_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BD6DAE59-9863-44EE-97CC-503B980FB9AA", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r420:-:*:*:*:*:*:*:*", "matchCriteriaId": "C264C95F-F8CE-4EC1-B5A5-71998F0A75C3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1B4F9EF2-6C73-40AA-AF3B-BCCDFAF92E0A", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r300:-:*:*:*:*:*:*:*", "matchCriteriaId": "A8A4809E-770F-4D7B-A532-37160D8A3943", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-r320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "84C41F6C-7B86-4823-8214-9C244283C3AE", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-r320:-:*:*:*:*:*:*:*", "matchCriteriaId": "32E135F9-CB75-49AF-B7C3-25E8EA3AB991", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-5300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6A1EC714-602B-4946-9857-EA601CEE8504", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-5300:-:*:*:*:*:*:*:*", "matchCriteriaId": "1FEF30DD-FCF0-499E-B5C2-4184C9A7E9D8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1520_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2BA40F4B-9EA2-416C-876C-714927FF9F32", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1520:-:*:*:*:*:*:*:*", "matchCriteriaId": "CBBE1648-D428-4A43-831D-AB3AF3F05739", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1420_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F22BED01-FC93-49D6-8623-053EE4327EAB", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1420:-:*:*:*:*:*:*:*", "matchCriteriaId": "148C6AE8-1480-4822-8E0B-1E8575246878", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "56A035E5-FBAD-44D1-879E-9C4062DF02B4", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1320:-:*:*:*:*:*:*:*", "matchCriteriaId": "69D21068-A51D-48B2-BF17-68BC61737EBC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-1020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D7E91BEB-06D4-4B01-8BC6-B252F299EBB0", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-1020:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A75CF5D-0ADE-448E-BF3C-8E2C268EE1BD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-9020_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1CB51A57-B840-4E4E-A970-B95E61B9D325", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-9020:-:*:*:*:*:*:*:*", "matchCriteriaId": "8696CE8A-C041-4EED-888B-36F2E499E67A", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-1340_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1E7ADA83-1E1B-459C-966C-00DD46B96198", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-1340:-:*:*:*:*:*:*:*", "matchCriteriaId": "1B381AE4-A769-403A-97FA-14FA5F8122CC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4500_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E19F9721-B79A-4C5D-8414-86C709D4C292", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4500:-:*:*:*:*:*:*:*", "matchCriteriaId": "7E8F99DC-4992-4141-AD76-B8A0A690AD4D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4400_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7124BF89-F495-4C5D-BBC8-7FFF4F160B1D", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4400:-:*:*:*:*:*:*:*", "matchCriteriaId": "8D53224A-F4AE-42D5-9CE6-C46892BD658D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4300_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1226F0B5-3300-4A13-B692-62C6DB407810", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4300:-:*:*:*:*:*:*:*", "matchCriteriaId": "EB77802D-96CB-49DB-A912-9DB901130F08", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4310_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FC21723E-18CF-4AC3-9EF7-0DC59D6438DF", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4310:-:*:*:*:*:*:*:*", "matchCriteriaId": "0FDF3ECD-A475-44D1-BF08-B1D60F33D163", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj501-4320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BB81B854-8606-4EAB-BCB1-C45AFF315F7F", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj501-4320:-:*:*:*:*:*:*:*", "matchCriteriaId": "060083B0-E9E5-4694-94AB-3517B4B6E0C2", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj301-1200_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F9C2854F-BDBC-42CB-AE2C-D2682B285EC1", "versionEndExcluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj301-1200:-:*:*:*:*:*:*:*", "matchCriteriaId": "3D279907-5CF4-416F-BE78-300FD52B5B2D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj301-1100_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "90EF11A3-0FC3-46C8-9AC7-90A6768149A3", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj301-1100:-:*:*:*:*:*:*:*", "matchCriteriaId": "6D92B425-000A-4A85-820E-E16B8AFF06B8", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-1000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F7C4F791-6705-4501-AAAD-A08B8731A644", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-1000:-:*:*:*:*:*:*:*", "matchCriteriaId": "E5A77DA0-B22A-4C26-8E64-6F272CD420A3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj101-9000_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D8EBA4D5-57A7-4AB4-80C8-B3AA0881438B", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj101-9000:-:*:*:*:*:*:*:*", "matchCriteriaId": "E3883A8C-C4EC-45F0-B164-0BADFF91E361", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj-pa3001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "902CECE1-A411-43D6-9FE6-C80D92F79909", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj-pa3001:-:*:*:*:*:*:*:*", "matchCriteriaId": "97E4422C-0758-4A41-B3C9-FB239E3440B6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:nj-pd3001_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7F4612C4-A7B2-44CD-8138-18B5A0A537D5", "versionEndIncluding": "1.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:nj-pd3001:-:*:*:*:*:*:*:*", "matchCriteriaId": "377396A7-4CDD-4768-AA23-A0B063962CC7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:omron:sysmac_studio:*:*:*:*:*:*:*:*", "matchCriteriaId": "D0C9C903-58E8-4AAD-9D8B-98EFB3CD5261", "versionEndIncluding": "1.49", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:na5-15w_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "26005582-DD0D-45F3-8FA6-4B1A5DB72B1A", "versionEndIncluding": "1.15", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:na5-15w:-:*:*:*:*:*:*:*", "matchCriteriaId": "A9B1DD5F-1260-4FF1-BE5F-42CF2748AA83", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:na5-12w_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4FA1DFB3-0E4A-4864-81E7-505064C6C6E4", "versionEndIncluding": "1.15", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:na5-12w:-:*:*:*:*:*:*:*", "matchCriteriaId": "79B75CC6-944C-4403-912B-EA58932B6951", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:na5-9w_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B401EFE5-F41D-4587-8401-DFA4464A7926", "versionEndIncluding": "1.15", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:na5-9w:-:*:*:*:*:*:*:*", "matchCriteriaId": "D0E96DE9-7831-463C-8D08-4D632BBF948C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:omron:na5-7w_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D90818CE-751B-4DF2-9CCC-0178E7349453", "versionEndIncluding": "1.15", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:omron:na5-7w:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE59D9EE-0CF7-4088-B872-B9B0063DD01C", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software \u0027Sysmac Studio\u0027 all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who successfully obtained the user credentials by analyzing the affected product to access the controller." }, { "lang": "es", "value": "Se presenta una vulnerabilidad de uso de credenciales embebidas en el controlador de automatizaci\u00f3n de M\u00e1quinas serie NJ todos los modelos Versiones 1.48 y anteriores, el controlador de automatizaci\u00f3n de M\u00e1quinas serie NX7 todos los modelos Versiones 1.28 y anteriores, el controlador de automatizaci\u00f3n de M\u00e1quinas serie NX1 todos los modelos Versiones 1.48 y anteriores, el software de automatizaci\u00f3n \"Sysmac Studio\" todos los modelos Versiones 1. 49 y anteriores, y Terminal programable (PT) serie NA5-15W/NA5-12W/NA5-9W/NA5-7W modelos Runtime Versiones 1.15 y anteriores, lo que puede permitir a un atacante remoto que haya obtenido con \u00e9xito las credenciales de usuario mediante el an\u00e1lisis del producto afectado acceder al controlador" } ], "id": "CVE-2022-34151", "lastModified": "2024-11-21T07:08:57.393", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 2.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2022-07-04T02:15:07.727", "references": [ { "source": "vultures@jpcert.or.jp", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "https://jvn.jp/en/vu/JVNVU97050784/index.html" }, { "source": "vultures@jpcert.or.jp", "tags": [ "Mitigation", "Vendor Advisory" ], "url": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory", "VDB Entry" ], "url": "https://jvn.jp/en/vu/JVNVU97050784/index.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mitigation", "Vendor Advisory" ], "url": "https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf" } ], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-798" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }