CVE-2022-34151: fallo crítico en OMRON Corporation Machine automation…
Publicada el · Actualizada el
Seguir esta CVE+ Monitorear Machine automation controller NJ series+ Monitorear Machine automation controller NX series
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
50Vexday Risk Score
Prioriza la corrección. Ella explotación observada por VulnCheck.
ssvc Actcvss 9.4epss 1.3%
de la publicación al arma
Publicada en NVD4 jul
VulnCheck+40d
Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who successfully obtained the user credentials by analyzing the affected product to access the controller.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H
CVEs relacionadas — OMRON Corporation Machine automation…
En el mismo producto, de las más peligrosas a las menos.