Omron Corporation vulnerabilities
61 CVEs and advisories name Omron Corporation as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-1384Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers
- CVE-2025-0591Out-of-bounds Read vulnerability in CX-Programmer
- CVE-2024-12083Path Traversal Vulnerabilities in NJ/NX-series Machine Automation Controllers
- CVE-2024-12298Vulnerability Report on Improper Restriction of XML External Entity Reference in NB-Designer
- CVE-2024-49501Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability.
- CVE-2024-33687Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions.
- CVE-2024-31413Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-AL[][]D-V4 (The version which was installed with a DVD ve
- CVE-2024-31412Out-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-AL[][]D-V4 Ver.
- CVE-2024-27121Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Series.
- CVE-2022-45792Directory Traversal in Project File Format allows overwrite (Zip Slip)
- CVE-2022-45790Omron FINS memory protection susceptible to bruteforce
- CVE-2022-45794Omron CJ-series and CS-series unauthenticated filesystem access.
- CVE-2022-45793Executable files writable by low-privileged users in Omron Sysmac Studio
- CVE-2023-43624CX-Designer Ver.3.740 and earlier (included in CX-One CXONE-AL[][]D-V4) contains an improper restriction of XML external entity reference (
- CVE-2023-22277Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier.
- CVE-2023-22314Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier.
- CVE-2023-22317Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier.
- CVE-2023-38748Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier.
- CVE-2023-38747Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier.
- CVE-2023-38746Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier.
- CVE-2023-38744Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of
- CVE-2023-27396FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation)
- CVE-2023-27385Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions.
- CVE-2023-0811 Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored.
- CVE-2023-22322Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier.
- CVE-2023-22366CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability.
- CVE-2023-22357Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being execu
- CVE-2022-46282Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a spec
- CVE-2022-43667Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitr
- CVE-2022-43509Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code