High severity · published Jul 4, 2022
CVE-2022-33208
Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all…
8.1
CVSS
1.9%
EPSS
No
On KEV
Description
Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who can analyze the communication between the affected controller and automation software 'Sysmac Studio' and/or a Programmable Terminal (PT) to access the controller.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NF
Na5-12w Firmware · Omron
through 1.15 · source: NVD
NF
Na5-15w Firmware · Omron
through 1.15 · source: NVD
NF
Na5-7w Firmware · Omron
through 1.15 · source: NVD
NF
Na5-9w Firmware · Omron
through 1.15 · source: NVD
NF
Nj-pa3001 Firmware · Omron
through 1.48 · source: NVD
NF
Nj-pd3001 Firmware · Omron
through 1.48 · source: NVD
NF
Nj101-1000 Firmware · Omron
through 1.48 · source: NVD
NF
Nj101-1020 Firmware · Omron
through 1.48 · source: NVD
NF
Nj101-9000 Firmware · Omron
through 1.48 · source: NVD
NF
Nj101-9020 Firmware · Omron
through 1.48 · source: NVD
NF
Nj301-1100 Firmware · Omron
through 1.48 · source: NVD
NF
Nj301-1200 Firmware · Omron
before 1.48 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-33208
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-33208
Third Party Advisory
https://jvn.jp/en/vu/JVNVU97050784/index.html
Mitigation
https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdf
More from Na5-12w Firmware
8.1
CVE-2022-34151
Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models…