CVE-2022-33208
Description
Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who can analyze the communication between the affected controller and automation software 'Sysmac Studio' and/or a Programmable Terminal (PT) to access the controller.
How to fix
- omron nj301-1200_firmware1.48 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| omron sysmac_studio | v ≤ 1.49 | — |
| omron nx701-1600_firmware | v ≤ 1.28 | — |
| omron nx701-1700_firmware | v ≤ 1.28 | — |
| omron nx701-z700_firmware | v ≤ 1.28 | — |
| omron nx701-z600_firmware | v ≤ 1.28 | — |
| omron nx701-1720_firmware | v ≤ 1.28 | — |
| omron nx701-1620_firmware | v ≤ 1.28 | — |
| omron nx102-1200_firmware | v ≤ 1.48 | — |
| omron nx102-1100_firmware | v ≤ 1.48 | — |
| omron nx102-1000_firmware | v ≤ 1.48 | — |
| omron nx102-1220_firmware | v ≤ 1.48 | — |
| omron nx102-1120_firmware | v ≤ 1.48 | — |
| omron nx102-1020_firmware | v ≤ 1.48 | — |
| omron nx102-9020_firmware | v ≤ 1.48 | — |
| omron nx1p2-1140dt_firmware | v ≤ 1.48 | — |
| omron nx1p2-1140dt1_firmware | v ≤ 1.48 | — |
| omron nx1p2-1040dt_firmware | v ≤ 1.48 | — |
| omron nx1p2-1040dt1_firmware | v ≤ 1.48 | — |
| omron nx1p2-9024dt_firmware | v ≤ 1.48 | — |
| omron nx1p2-9024dt1_firmware | v ≤ 1.48 | — |
| omron nx1w-cif01_firmware | v ≤ 1.48 | — |
| omron nx1w-cif11_firmware | v ≤ 1.48 | — |
| omron nx1w-cif12_firmware | v ≤ 1.48 | — |
| omron nx1w-adb21_firmware | v ≤ 1.48 | — |
| omron nx1w-dab21v_firmware | v ≤ 1.48 | — |
| omron nx1w-mab221_firmware | v ≤ 1.48 | — |
| omron nj501-1500_firmware | v ≤ 1.48 | — |
| omron nj501-140_firmware | v ≤ 1.48 | — |
| omron nj501-1300_firmware | v ≤ 1.48 | — |
| omron nj501-r500_firmware | v ≤ 1.48 | — |
| omron nj501-r520_firmware | v ≤ 1.48 | — |
| omron nj501-r400_firmware | v ≤ 1.48 | — |
| omron nj501-r420_firmware | v ≤ 1.48 | — |
| omron nj501-r300_firmware | v ≤ 1.48 | — |
| omron nj501-r320_firmware | v ≤ 1.48 | — |
| omron nj501-5300_firmware | v ≤ 1.48 | — |
| omron nj501-1520_firmware | v ≤ 1.48 | — |
| omron nj501-1420_firmware | v ≤ 1.48 | — |
| omron nj501-1320_firmware | v ≤ 1.48 | — |
| omron nj101-1020_firmware | v ≤ 1.48 | — |
| omron nj101-9020_firmware | v ≤ 1.48 | — |
| omron nj501-1340_firmware | v ≤ 1.48 | — |
| omron nj501-4500_firmware | v ≤ 1.48 | — |
| omron nj501-4400_firmware | v ≤ 1.48 | — |
| omron nj501-4300_firmware | v ≤ 1.48 | — |
| omron nj501-4310_firmware | v ≤ 1.48 | — |
| omron nj501-4320_firmware | v ≤ 1.48 | — |
| omron nj301-1200_firmware | v < 1.48 | 1.48 |
| omron nj301-1100_firmware | v ≤ 1.48 | — |
| omron nj101-1000_firmware | v ≤ 1.48 | — |
| omron nj101-9000_firmware | v ≤ 1.48 | — |
| omron nj-pa3001_firmware | v ≤ 1.48 | — |
| omron nj-pd3001_firmware | v ≤ 1.48 | — |
| omron na5-15w_firmware | v ≤ 1.15 | — |
| omron na5-12w_firmware | v ≤ 1.15 | — |
| omron na5-9w_firmware | v ≤ 1.15 | — |
| omron na5-7w_firmware | v ≤ 1.15 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.