VULNERABILITY INTELLIGENCE

CVE-2022-33971

CVSS score7.5 HIGH

EPSS probability1.24%

CISA KEVNot currently listed

Published2022-07-04

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow an adjacent attacker who can analyze the communication between the controller and the specific software used by OMRON internally to cause a denial-of-service (DoS) condition or execute a malicious program.

Weakness classification

nvd@nist.gov: CWE-294
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-489

Primary references

vultures@jpcert.or.jp — Third Party Advisory, VDB Entry
vultures@jpcert.or.jp — Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory