Dispatch date of Information Affected Products Omron Advisory Remarks
3rd Party Advisory

Release date:
March 7, 2024

Machine Automation Controller NJ-series
Machine Automation Controller NX-series
Path Traversal vulnerability in NJ/NX-series Machine Automation Controllers

Last modified:
November 13, 2023

Release date:
September 19, 2023

Programmable Controller CJ-series
Programmable Controller CS-series
Programmable Controller CP-series
Improper Control of Interaction Frequency in FINS protocol between the CS/CJ/CP-series Programable Controllers <November 13, 2023>
Corrected method of obtaining countermeasure products.
ICSA-23-262-05

Last modified:
November 13, 2023

Release date:
August 1, 2023

Programmable Controller CJ2M CPU Unit
Programmable Controller CJ2H CPU Unit
Programmable Controller CS/CJ Series EtherNet/IP™ Unit
Vulnerability that could cause a Denial of Service (DoS) state in the built-in EtherNet/IP™ port of the CJ Series CJ2 CPU unit and the CS/CJ series EtherNet/IP™ unit <November 13, 2023>
Corrected method of obtaining countermeasure products.
<September 19, 2023>
Corrected countermeasure version release date
JVNVU#92193064

Release date:
October 23, 2023

CX-Designer Vulnerability Report on Improper Restriction of XML External Entity Reference in CX-Designer
JVNVU#98683567

Release date:
September 19, 2023

Automation Software Sysmac Studio Improper Authorization Vulnerability in Automation Software Sysmac Studio
ICSA-23-262-04

Release date:
September 19, 2023

Automation Software Sysmac Studio
NX-IO Configurator
Path Traversal Vulnerability in Automation Software Sysmac Studio and NX-IO Configurator
ICSA-23-262-03

Last modified:
September 19, 2023

Release date:
April 17, 2023

Programmable Controller CS-series CPU Units
Programmable Controller CJ-series CPU Units
Programmable Controller CP-series CPU Units
Machine Automation Controller NJ-series CPU Units
Machine Automation Controller NX1P-series CPU Units
Machine Automation Controller NX102-series CPU Units
Machine Automation Controller NX7 Database Connection
About Known Issues in the FINS Protocol Implemented in Omron Products <September 19, 2023>
Clerical corrections on Main products affected
JVNTA#91513661

Release date:
August 1, 2023

MX2 EtherNet/IP™ Option Board 3G3AX-MX2-EIP-A NicheStack TCP/IP stack Vulnerabilities on EtherNet/IP™ option board for Multi-function Compact Inverter 3G3MX2
ICSA-21-217-01

Release date:
August 1, 2023

CX-Programmer Out-of-bounds Read, Use After Free and Heap-based Buffer Overflow Vulnerabilities in CX-Programmer
JVNVU#93286117

Last modified:August 1, 2023

Release date:
April 24, 2023

Support tool CX-Drive for inverter/servo Support tool CX-Drive for inverter/servo heap-based buffer overflow vulnerability
JVNVU#97372625

Release date:
April 17, 2023

Programmable Controller CJ-series
Programmable Controller CS-series
Missing Authentication Vulnerabilities related to file system of CS/CJ-series Programmable Controllers
ICSA-23-108-01

Release date:
March 13, 2023

Programmable Controller CJ-series
Programmable Controller CS-series
Programmable Controller CP-series
Vulnerabilities related to bypass of user memory protection function of CS/CJ/CP-series Programmable Controllers
ICSA-23-073-01

Last modified:October 11, 2022

Release date:
July 1, 2022

Machine Automation Controller NX7-series
Machine Automation Controller NX1-series
Machine Automation Controller NJ-series
Automation Software Sysmac Studio
Programable Terminal NA-series
Authentication bypass vulnerabilities in communications functions of NJ/NX-series Machine Automation Controllers
ICSA-22-314-08

Last modified:October 11, 2022

Release date:
July 1, 2022

Machine Automation Controller NX7-series
Machine Automation Controller NX1-series
Machine Automation Controller NJ-series
Malicious program execution vulnerability in NJ/NX-series Machine Automation Controllers
ICSA-22-314-07