Omron NJ501-4500 Firmware vulnerabilities

6 CVEs affecting Omron NJ501-4500 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-33687, published 2024-06-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-33208, published 2022-07-04. High severity, CVSS 8.1. EPSS: 1.9% chance of exploitation in the next 30 days. Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and…
CVE-2023-27396, published 2023-06-19. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks composed of OMRON…
CVE-2022-34151, published 2022-07-04. High severity, CVSS 8.1. EPSS: 1.3% chance of exploitation in the next 30 days. Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier,…
CVE-2022-33971, published 2022-07-04. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and…
CVE-2022-31206, published 2022-07-26. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio…
CVE-2024-33687, published 2024-06-24. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product…