CVE-2022-33971: Omron Nj-PA3001 Firmware

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow an adjacent attacker who can analyze the communication between the controller and the specific software used by OMRON internally to cause a denial-of-service (DoS) condition or execute a malicious program.

Affected products

Omron Nj-PA3001 Firmware: up to and including 1.48
Omron Nj-PD3001 Firmware: up to and including 1.48
Omron NJ101-1000 Firmware: up to and including 1.48
Omron NJ101-1020 Firmware: up to and including 1.48
Omron NJ101-9000 Firmware: up to and including 1.48
Omron NJ101-9020 Firmware: up to and including 1.48
Omron NJ301-1100 Firmware: up to and including 1.48
Omron NJ301-1200 Firmware: before 1.48 (fixed in 1.48)
Omron NJ501-1300 Firmware: up to and including 1.48
Omron NJ501-1320 Firmware: up to and including 1.48
Omron NJ501-1340 Firmware: up to and including 1.48
Omron NJ501-140 Firmware: up to and including 1.48
Omron NJ501-1420 Firmware: up to and including 1.48
Omron NJ501-1500 Firmware: up to and including 1.48
Omron NJ501-1520 Firmware: up to and including 1.48
Omron NJ501-4300 Firmware: up to and including 1.48
Omron NJ501-4310 Firmware: up to and including 1.48
Omron NJ501-4320 Firmware: up to and including 1.48
Omron NJ501-4400 Firmware: up to and including 1.48
Omron NJ501-4500 Firmware: up to and including 1.48
Omron NJ501-5300 Firmware: up to and including 1.48
Omron NJ501-r300 Firmware: up to and including 1.48
Omron NJ501-r320 Firmware: up to and including 1.48
Omron NJ501-r400 Firmware: up to and including 1.48
Omron NJ501-r420 Firmware: up to and including 1.48
and 27 more

Published 2022-07-04. Last modified 2026-06-17.