OMRON
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| CX-Position | 7 | – | Apr 1, 2022 |
| CX-Programmer | 4 | – | Oct 6, 2022 |
| CX-One | 4 | – | Jan 14, 2022 |
| CX-Server | 3 | – | Feb 9, 2021 |
| CX-Protocol | 3 | – | Feb 9, 2021 |
| Sysmac Studio | 2 | – | Jan 22, 2024 |
| CJ-series and CS-series CPU modules | 2 | – | Jan 22, 2024 |
| CJ1M SYSMAC CP-series | 1 | – | Mar 16, 2023 |
| CJ1M SYSMAC CJ-series | 1 | – | Mar 16, 2023 |
| CJ1M SYSMAC CS-series | 1 | – | Mar 16, 2023 |
Exploited and recent CVEs
- CVE-2022-45792 Directory Traversal in Project File Format allows overwrite (Zip Slip) 0.3%
- CVE-2022-45790 Omron FINS memory protection susceptible to bruteforce 0.9%
- CVE-2022-45794 Omron CJ-series and CS-series unauthenticated filesystem access. 0.5%
- CVE-2022-45793 Executable files writable by low-privileged users in Omron Sysmac Studio 0.3%
- CVE-2023-0811 Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they 0.6%
- CVE-2023-0811 Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they 0.6%
- CVE-2023-0811 Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they 0.6%
- CVE-2022-3396 OMRON CX-Programmer Out-of-bounds Write 0.7%
- CVE-2022-3398 OMRON CX-Programmer Out-of-bounds Write 0.7%
- CVE-2022-3397 OMRON CX-Programmer Out-of-bounds Write 0.7%
- CVE-2022-2979 Omron CX-Programmer 0.2%
- CVE-2022-26419 Rockwell Automation Studio 5000 Logix Designer Code Injection 2.1%
- CVE-2022-26022 Rockwell Automation Studio 5000 Logix Designer Out-of-Bounds Write 1.5%
- CVE-2022-26417 Rockwell Automation Studio 5000 Logix Designer Use After Free 1.5%
- CVE-2022-25959 Rockwell Automation Studio 5000 Logix Designer Improper Restriction of Operations within the Bounds of a Memory Buffer 1.5%
- CVE-2022-21137 Omron CX-One 9.3%
- CVE-2020-27257 Omron CX-One 1.9%
- CVE-2020-27257 Omron CX-One 1.9%
- CVE-2020-27257 Omron CX-One 1.9%
- CVE-2020-27257 Omron CX-One 1.9%
- CVE-2020-27261 Omron CX-One 7.9%
- CVE-2020-27261 Omron CX-One 7.9%
- CVE-2020-27261 Omron CX-One 7.9%
- CVE-2020-27261 Omron CX-One 7.9%
- CVE-2020-27259 Omron CX-One 2.8%
- CVE-2020-27259 Omron CX-One 2.8%
- CVE-2020-27259 Omron CX-One 2.8%
- CVE-2020-27259 Omron CX-One 2.8%