CVE-2022-33971

Katalog CVE

CVSS 7.5 · High EPSS 1,2%

Kerentanan Authentication Bypass by Capture-replay pada omron nx701-1600 firmware, omron nx701-1700 firmware +50 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow an adjacent attacker who can analyze the communication between the controller and the specific software used by OMRON internally to cause a denial-of-service (DoS) condition or execute a malicious program.

Rincian

Terbit di NVD

4 Juli 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-294: Authentication Bypass by Capture-replay
CWE-489: Active Debug Code

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 68,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.ia.omron.com/product/vulnerability/OMSR-2022-002_en.pdf mitigasi · advisory vendor
• https://jvn.jp/en/vu/JVNVU97050784/index.html advisory pihak ketiga · vdb entry