Vulnerabilities

Summary — last 7 days

New vulnerabilities2,768▼ 449 vs. last week
Critical / high1,325▼ 128 vs. last week
New active exploitation (KEV)4▼ 5 vs. last week
Unscored (no CVSS)268▼ 240 vs. last week
–

2 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedCritical (9.8)1.4%—Omron Cs1w-eip21 FirmwareOmron Cs1w-spu01-v2 FirmwareOmron Cs1w-spu02-v2 FirmwareOmron Cs1w-etn21 Firmware+2676/19/20236/17/2026
FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues -- (1)Plaintext…
ModifiedCritical (9.1)0.62%—Omron Sysmac Cj2h-cpu64 FirmwareOmron Sysmac Cj2h-cpu64-eip FirmwareOmron Sysmac Cj2h-cpu65 FirmwareOmron Sysmac Cj2h-cpu65-eip Firmware+1243/16/20236/17/2026
Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard…