https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:49:56.519466+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04255 bdu:2022-04255 2026-10-02T15:49:56.524185+00:00 bdu:2022-04255 https://cve.radiocsirt.org/vuln/euvd-2026-324145 EUVD-2026-324145 2026-10-02T15:49:56.524223+00:00 EUVD-2026-324145 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34151 fkie_cve-2022-34151 2026-10-02T15:49:56.524252+00:00

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who successfully obtained the user credentials by analyzing the affected product to access the controller.

 https://cve.radiocsirt.org/vuln/ghsa-gx2r-v5m4-v5qp GHSA-gx2r-v5m4-v5qp 2026-10-02T15:49:56.524286+00:00

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who successfully obtained the user credentials by analyzing the affected product to access the controller.

 https://cve.radiocsirt.org/vuln/gsd-2022-34151 gsd-2022-34151 2026-10-02T15:49:56.524307+00:00 gsd-2022-34151 https://cve.radiocsirt.org/vuln/icsa-22-314-08 ICSA-22-314-08 — Omron NJ/NX-series Machine Automation Controllers 2026-10-02T15:49:56.524318+00:00

Use of hard-coded credentials vulnerability exists in machine automation controller NJ series models v1.48 and earlier, machine automation controller NX7 series models v1.28 and earlier, machine automation controller NX1 series models v1.48 and earlier, automation software Sysmac Studio models v1.49 and earlier, and programmable terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models with runtime v1.15 and earlier; this may allow a remote attacker who successfully obtained the user credentials by analyzing the affected product to access the controller.CVE-2022-34151 has been assigned to this vulnerability. A CVSS v3 base score of 9.4 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H). An attacker who can capture and analyze communication between the affected controllers and either automation software Sysmac Studio and/or a programmable terminal (PT) can obtain sensitive information that would allow the attacker to bypass authentication and access the controller.CVE-2022-33208 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).

 https://cve.radiocsirt.org/vuln/jvndb-2022-002691 jvndb-2022-002691 2026-10-02T15:49:56.524344+00:00

Machine automation controller NJ/NX series, Automation software "Sysmac Studio", and programmable terminal (PT) NA series provided by OMRON Corporation contain multiple vulnerabilities in the communication function. The vulnerabilities are as follows. * Use of Hard-coded Credentials (CWE-798) - CVE-2022-34151 * Authentication Bypass by Capture-replay (CWE-294) - CVE-2022-33208 * Active Debug Code (CWE-489) - CVE-2022-33971 OMRON Corporation reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.