CVE-2022-33971 - CVE House
Back to Database
Status published Unknown CVE-2022-33971

Authentication bypass by capture-replay vulnerability exists in Machine automation controller...

Vulnerability Description

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier, which may allow an adjacent attacker who can analyze the communication between the controller and the specific software used by OMRON internally to cause a denial-of-service (DoS) condition or execute a malicious program.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-33971

Credits & Attribution

No credits recorded in the NVD database.

References

More from OMRON Corporation

View All →
CVE-2025-1384
Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers
High 7
CVE-2025-0591
Out-of-bounds Read vulnerability in CX-Programmer
High 7.8
CVE-2024-49501
Sysmac Studio provided by OMRON Corporation contains an incorrect authorization...
Medium 5.7
CVE-2024-33687
Insufficient verification of data authenticity issue exists in NJ Series...
Unknown 0
CVE-2024-31413
Free of pointer not at start of buffer vulnerability exists...
Unknown 0

Affected Vendor

OMRON Corporation

View all reports →

Affected Software

Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series
Vulnerable Versions:
Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, and Machine automation controller NJ series all models V 1.48 and earlier

Timeline

Official Publish: July 4th, 2022
Last Modified: June 2nd, 2026
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.