CVE-2022-34151 - CVE House
Back to Database
Status published Unknown CVE-2022-34151

Use of hard-coded credentials vulnerability exists in Machine automation controller...

Vulnerability Description

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who successfully obtained the user credentials by analyzing the affected product to access the controller.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-34151

Credits & Attribution

No credits recorded in the NVD database.

References

More from OMRON Corporation

View All →
CVE-2025-1384
Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers
High 7
CVE-2025-0591
Out-of-bounds Read vulnerability in CX-Programmer
High 7.8
CVE-2024-49501
Sysmac Studio provided by OMRON Corporation contains an incorrect authorization...
Medium 5.7
CVE-2024-33687
Insufficient verification of data authenticity issue exists in NJ Series...
Unknown 0
CVE-2024-31413
Free of pointer not at start of buffer vulnerability exists...
Unknown 0

Affected Vendor

OMRON Corporation

View all reports →

Affected Software

Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series
Vulnerable Versions:
Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier

Timeline

Official Publish: July 4th, 2022
Last Modified: June 2nd, 2026
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.