CVE-2014-2370CWE-79

CVE-2014-2370: vulnerability in Omron NS5

Omron NS Series HMI Improper Neutralization of Input During Web Page Generation

Published 24 Jul 2014 · Updated 06 Oct 2025

Follow this CVE + Monitor NS10 + Monitor NS12

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4epss 1.4%

Cross-site scripting (XSS) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to inject arbitrary web script or HTML via crafted data.

AV:N/AC:L/Au:S/C:N/I:P/A:N

Affected products

Omron · NS10 Omron · NS12 Omron · NS15 Omron · NS5 Omron · NS8

Related CVEs — Omron NS5

In the same product, most dangerous first.

CVE-2014-2369—Omron NS Series HMI Cross-Site Request ForgeryEPSS 0.6%

References

http://ics-cert.us-cert.gov/advisories/ICSA-14-203-01 https://automation.omron.com/en/us/products/https://www.cisa.gov/news-events/ics-advisories/icsa-14-203-01 http://www.securityfocus.com/bid/68836