← Back

Omron

omron

89 CVEs • 976 products

Products (976)

Click to collapse
Toggle
Cx Programmer
cx-programmer
Cx Supervisor
cx-supervisor
Cx One
cx-one
Cx Server
cx-server
Cx Protocol
cx-protocol
Cx Position
cx-position
Cx Flnet
cx-flnet
Sysmac Studio
sysmac_studio
Cj2h Plc
cj2h_plc
Cj2m Plc
cj2m_plc
Cx Drive
cx-drive

CVEs (89)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Omron
1Cx Supervisor
Jun 17, 2026
Mar 21, 2018
N/A· v4
5.3 MEDIUM· v3
4.6 MEDIUM· v2
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow.
1Omron
1Ns Series Firmware
Jun 17, 2026
Feb 5, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific screen, as demonstrated by monitor.html.
1Omron
3Cj2h Plc
Cj2m PlcCx Programmer
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
2.1 LOW· v2
Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 use a reversible format for password storage in object files on Compact Flash cards, which makes it easier for local use...Show more
Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 use a reversible format for password storage in object files on Compact Flash cards, which makes it easier for local users to obtain sensitive information by reading a file.Show less
1Omron
1Cx Programmer
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
2.1 LOW· v2
Omron CX-One CX-Programmer before 9.6 uses a reversible format for password storage in project source-code files, which makes it easier for local users to obtain sensitive information by reading a file.
1Omron
3Cj2h Plc
Cj2m PlcCx Programmer
Jun 2, 2026
Oct 6, 2015
N/A· v4
10.0 CRITICAL· v3
5.0 MEDIUM· v2
Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 rely on cleartext password transmission, which allows remote attackers to obtain sensitive information by sniffing the n...Show more
Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 rely on cleartext password transmission, which allows remote attackers to obtain sensitive information by sniffing the network during a PLC unlock request.Show less
1Omron
6Ns10 Hmi Terminal
Ns12 Hmi TerminalNs15 Hmi Terminal+3 more
May 6, 2026
Jul 24, 2014
N/A· v4
N/A· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to inject arbitrary web script or HTML via craft...Show more
Cross-site scripting (XSS) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to inject arbitrary web script or HTML via crafted data.Show less
1Omron
6Ns10 Hmi Terminal
Ns12 Hmi TerminalNs15 Hmi Terminal+3 more
May 6, 2026
Jul 24, 2014
N/A· v4
N/A· v3
6.0 MEDIUM· v2
Cross-site request forgery (CSRF) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authentication of unspecifi...Show more
Cross-site request forgery (CSRF) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.Show less
1Omron
1Openwnn
Apr 29, 2026
Mar 29, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The OMRON OpenWnn application before 1.3.6 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem.
3Freewnn
OmronWnn
3Freewnn
Wnn4Worldview
Apr 16, 2026
Oct 20, 2000
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands.