Nj301-1200 Firmware vulnerabilities

6 known vulnerabilities in Nj301-1200 Firmware from Omron. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  NJ Series CPU Unit: Insufficient Verification of Data Authenticity

  CVE-2024-33687Jun 24, 2024Omron

  Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product may not be able to detect the alteration.

• 7.2 High severity

  Machine Automation Controller NJ Series: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-27121Mar 12, 2024Omron

  Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Series. An arbitrary file in the affected product may be accessed or arbitrary code may be executed by processing a specially crafted request se

• 9.8 Critical severity

  Nx701-1600 Firmware: Improper Verification of Cryptographic Signature

  CVE-2022-31206Jul 26, 2022OmronEPSS 1.12%

  The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software (which compiles IEC 61131-3 conformant POU c

• 8.1 High severity

  Machine automation controller NJ series…: Use of Hard-coded Credentials

  CVE-2022-34151Jul 4, 2022OmronEPSS 1.29%

  Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and ea

• 7.5 High severity

  Machine automation controller NJ series…: Authentication Bypass by Capture-replay

  CVE-2022-33971Jul 4, 2022OmronEPSS 1.27%

  Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models

• 8.1 High severity

  Machine automation controller NJ series…: Authentication Bypass by Capture-replay

  CVE-2022-33208Jul 4, 2022OmronEPSS 1.92%

  Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1