Omron NJ/NX-series Machine Automation Controllers
view advisory published 2022-11-10
Successful exploitation of these vulnerabilities may allow an attacker to bypass authentication in the communications connection process to login and operate the controller products without authorization.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-34151US | high8.1OT elevated | — | ||
Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.… | ||||
| CVE-2022-33208US | high8.1OT elevated | — | ||
Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-22-314-08 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationNJ/NX-series Controllers and Software
Automation Software Sysmac Studio: Update to version 1.50 or higher
- MitigationNJ/NX-series Controllers and Software
Automation Software Sysmac Studio: Update to version 1.50 or higher
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan