omron Vulnerability Advisory Catalog

Total 88 security vulnerabilities recorded for omron software and firmware.

← Back to All Vendors
Component: cx-flnet

Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Pr...

📅 2018-04-17
CVSS 7.8 Dossier →
Component: cx-flnet

Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Pr...

📅 2018-04-17
CVSS 7.8 Dossier →
CVE-2018-7525 MEDIUM
Component: cx-supervisor

In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulne...

📅 2018-03-21
CVSS 5.3 Dossier →
CVE-2018-7523 MEDIUM
Component: cx-supervisor

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability....

📅 2018-03-21
CVSS 5.3 Dossier →
CVE-2018-7521 MEDIUM
Component: cx-supervisor

In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafted project ...

📅 2018-03-21
CVSS 5.3 Dossier →
CVE-2018-7519 MEDIUM
Component: cx-supervisor

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow....

📅 2018-03-21
CVSS 5.3 Dossier →
CVE-2018-7517 MEDIUM
Component: cx-supervisor

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability....

📅 2018-03-21
CVSS 5.3 Dossier →
CVE-2018-7515 MEDIUM
Component: cx-supervisor

In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls a...

📅 2018-03-21
CVSS 5.3 Dossier →
CVE-2018-7513 MEDIUM
Component: cx-supervisor

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow....

📅 2018-03-21
CVSS 5.3 Dossier →
CVE-2018-6624 CRITICAL
Component: ns_series_firmware

OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific screen, as demo...

📅 2018-02-05
CVSS 9.8 Dossier →
CVE-2015-1015 UNKNOWN
Component: cx-programmer

Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 use a reversible format for password storage in ob...

📅 2015-10-06
CVSS 2.1 Dossier →
CVE-2015-0988 UNKNOWN
Component: cx-programmer

Omron CX-One CX-Programmer before 9.6 uses a reversible format for password storage in project source-code files, which makes it easier for local user...

📅 2015-10-06
CVSS 2.1 Dossier →
CVE-2015-0987 CRITICAL
Component: cx-programmer

Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 rely on cleartext password transmission, which all...

📅 2015-10-06
CVSS 10.0 Dossier →
CVE-2014-2370 UNKNOWN
Component: ns_series_system_program_firmware

Cross-site scripting (XSS) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remot...

📅 2014-07-24
CVSS 4.0 Dossier →
CVE-2014-2369 UNKNOWN
Component: ns_series_system_program_firmware

Cross-site request forgery (CSRF) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allow...

📅 2014-07-24
CVSS 4.6 Dossier →
CVE-2013-2301 UNKNOWN
Component: openwnn

The OMRON OpenWnn application before 1.3.6 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive informa...

📅 2013-03-29
CVSS 4.3 Dossier →
Page 4 of 4 (88 Total Records)