omron Vulnerability Advisory Catalog

Total 88 security vulnerabilities recorded for omron software and firmware.

← Back to All Vendors
Component: plc_cj1_firmware

In all versions of Omron PLC CJ Series, an attacker can send a series of specific data packets within a short period, causing a service error on the P...

๐Ÿ“… 2020-03-05
CVSS 7.5 Dossier →
CVE-2019-18269 CRITICAL
Component: plc_cj_firmware

Omronโ€™s CS and CJ series PLCs have an unrestricted externally accessible lock vulnerability....

๐Ÿ“… 2019-12-16
CVSS 9.8 Dossier →
CVE-2019-18261 CRITICAL
Component: plc_cj_firmware

In Omron PLC CS series, all versions, Omron PLC CJ series, all versions, and Omron PLC NJ series, all versions, the software does not implement suffic...

๐Ÿ“… 2019-12-16
CVSS 9.8 Dossier →
CVE-2019-18259 CRITICAL
Component: plc_cj_firmware

In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary messages or execute commands....

๐Ÿ“… 2019-12-16
CVSS 9.8 Dossier →
Component: plc_cj_firmware

In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and ...

๐Ÿ“… 2019-12-16
CVSS 8.1 Dossier →
Component: cx-supervisor

In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vuln...

๐Ÿ“… 2019-11-26
CVSS 8.8 Dossier →
Component: network_configurator_for_devicenet_safety

The application (Network Configurator for DeviceNet Safety 3.41 and prior) searches for resources by means of an untrusted search path that could exec...

๐Ÿ“… 2019-06-12
CVSS 7.8 Dossier →
CVE-2019-6556 MEDIUM
Component: common_components

When processing project files, the application (Omron CX-Programmer v9.70 and prior and Common Components January 2019 and prior) fails to check if it...

๐Ÿ“… 2019-04-10
CVSS 6.6 Dossier →
Component: poweract_pro_master_agent

PowerAct Pro Master Agent for Windows Version 5.13 and earlier allows authenticated attackers to bypass access restriction to alter or edit unauthoriz...

๐Ÿ“… 2019-03-27
CVSS 6.5 Dossier →
Component: cx-supervisor

When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the application to...

๐Ÿ“… 2019-02-12
CVSS 5.0 Dossier →
Component: cx-supervisor

An access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could lead to type confusion when processing project files...

๐Ÿ“… 2019-02-12
CVSS 7.3 Dossier →
Component: cx-one

Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files. An ...

๐Ÿ“… 2019-01-30
CVSS 7.8 Dossier →
Component: cx-supervisor

An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 and prior) through a specially ...

๐Ÿ“… 2019-01-28
CVSS 7.3 Dossier →
Component: cx-supervisor

A type confusion vulnerability exists when processing project files in CX-Supervisor (Versions 3.42 and prior). An attacker could use a specially craf...

๐Ÿ“… 2019-01-22
CVSS 7.3 Dossier →
Component: cx-supervisor

Several use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior). When processing project files, the application...

๐Ÿ“… 2019-01-22
CVSS 8.8 Dossier →
Component: cx-supervisor

An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 and prior) through a specially ...

๐Ÿ“… 2019-01-22
CVSS 5.0 Dossier →
Component: cx-supervisor

CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could exploit this to execute code un...

๐Ÿ“… 2019-01-22
CVSS 8.8 Dossier →
Component: cx-one

Two stack-based buffer overflow vulnerabilities have been discovered in CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-S...

๐Ÿ“… 2018-12-04
CVSS 7.8 Dossier →
Component: cx-one

In CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior), when processing project files, the ...

๐Ÿ“… 2018-12-04
CVSS 7.8 Dossier →
Component: cx-supervisor

A type confusion vulnerability exists when processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, which may allow an attacker to ...

๐Ÿ“… 2018-11-05
CVSS 7.8 Dossier →
Component: cx-supervisor

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, whi...

๐Ÿ“… 2018-11-05
CVSS 7.8 Dossier →
Component: cx-supervisor

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can force the a...

๐Ÿ“… 2018-11-05
CVSS 3.3 Dossier →
Component: cx-supervisor

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with a specific byte, memory corruption may occur within...

๐Ÿ“… 2018-11-05
CVSS 7.8 Dossier →
Component: cx-flnet

Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Pr...

๐Ÿ“… 2018-04-17
CVSS 7.8 Dossier →
Page 3 of 4 (88 Total Records)