Omron Sysmac Studio vulnerabilities

3 CVEs affecting Omron Sysmac Studio, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-45792, published 2024-01-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-33208, published 2022-07-04. High severity, CVSS 8.1. EPSS: 1.9% chance of exploitation in the next 30 days. Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and…
CVE-2022-34151, published 2022-07-04. High severity, CVSS 8.1. EPSS: 1.3% chance of exploitation in the next 30 days. Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier,…
CVE-2022-45792, published 2024-01-22. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Project files may contain malicious contents which the software will use to create files on the filesystem. This allows directory traversal and overwriting files with the privileges of the logged-in…