Omron NX1P2-9024dt1 Firmware vulnerabilities

5 CVEs affecting Omron NX1P2-9024dt1 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-33687, published 2024-06-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-33208, published 2022-07-04. High severity, CVSS 8.1. EPSS: 1.9% chance of exploitation in the next 30 days. Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and…
CVE-2023-27396, published 2023-06-19. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks composed of OMRON…
CVE-2022-34151, published 2022-07-04. High severity, CVSS 8.1. EPSS: 1.3% chance of exploitation in the next 30 days. Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier,…
CVE-2022-33971, published 2022-07-04. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and…
CVE-2024-33687, published 2024-06-24. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product…