Omron NJ501-1400 Firmware vulnerabilities

3 CVEs affecting Omron NJ501-1400 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-33687, published 2024-06-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-27396, published 2023-06-19. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks composed of OMRON…
CVE-2022-31206, published 2022-07-26. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio…
CVE-2024-33687, published 2024-06-24. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product…