OMRON

Products

ProductCVEsExploitedLatest
CX-Position7–Apr 1, 2022
CX-Programmer4–Oct 6, 2022
CX-One4–Jan 14, 2022
CX-Server3–Feb 9, 2021
CX-Protocol3–Feb 9, 2021
Sysmac Studio2–Jan 22, 2024
CJ-series and CS-series CPU modules2–Jan 22, 2024
CJ1M SYSMAC CP-series1–Mar 16, 2023
CJ1M SYSMAC CJ-series1–Mar 16, 2023
CJ1M SYSMAC CS-series 1–Mar 16, 2023

Exploited and recent CVEs

  • CVE-2022-45792 High 7.8 Directory Traversal in Project File Format allows overwrite (Zip Slip) 0.3%
  • CVE-2022-45790 High 8.6 Omron FINS memory protection susceptible to bruteforce 0.9%
  • CVE-2022-45794 High 8.6 Omron CJ-series and CS-series unauthenticated filesystem access. 0.5%
  • CVE-2022-45793 Medium 5.5 Executable files writable by low-privileged users in Omron Sysmac Studio 0.3%
  • CVE-2023-0811 Critical 9.1 Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they 0.6%
  • CVE-2023-0811 Critical 9.1 Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they 0.6%
  • CVE-2023-0811 Critical 9.1 Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they 0.6%
  • CVE-2022-3396 High 7.8 OMRON CX-Programmer Out-of-bounds Write 0.7%
  • CVE-2022-3398 High 7.8 OMRON CX-Programmer Out-of-bounds Write 0.7%
  • CVE-2022-3397 High 7.8 OMRON CX-Programmer Out-of-bounds Write 0.7%
  • CVE-2022-2979 High 7.8 Omron CX-Programmer 0.2%
  • CVE-2022-26419 High 7.8 Rockwell Automation Studio 5000 Logix Designer Code Injection 2.1%
  • CVE-2022-26022 High 7.8 Rockwell Automation Studio 5000 Logix Designer Out-of-Bounds Write 1.5%
  • CVE-2022-26417 High 7.8 Rockwell Automation Studio 5000 Logix Designer Use After Free 1.5%
  • CVE-2022-25959 High 7.8 Rockwell Automation Studio 5000 Logix Designer Improper Restriction of Operations within the Bounds of a Memory Buffer 1.5%
  • CVE-2022-21137 High 7.8 Omron CX-One 9.3%
  • CVE-2020-27257 Unrated Omron CX-One 1.9%
  • CVE-2020-27257 Unrated Omron CX-One 1.9%
  • CVE-2020-27257 Unrated Omron CX-One 1.9%
  • CVE-2020-27257 Unrated Omron CX-One 1.9%
  • CVE-2020-27261 Unrated Omron CX-One 7.9%
  • CVE-2020-27261 Unrated Omron CX-One 7.9%
  • CVE-2020-27261 Unrated Omron CX-One 7.9%
  • CVE-2020-27261 Unrated Omron CX-One 7.9%
  • CVE-2020-27259 Unrated Omron CX-One 2.8%
  • CVE-2020-27259 Unrated Omron CX-One 2.8%
  • CVE-2020-27259 Unrated Omron CX-One 2.8%
  • CVE-2020-27259 Unrated Omron CX-One 2.8%