VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 26, 2022· Updated Jun 17, 2026

CVE-2022-31206

CVE-2022-31206

Description

The Omron SYSMAC Nx product family PLCs (NJ series, NY series, NX series, and PMAC series) through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software (which compiles IEC 61131-3 conformant POU code to native machine code for execution by the PLC's runtime). The resulting machine code is executed by a runtime, typically controlled by a real-time operating system. The logic that is downloaded to the PLC does not seem to be cryptographically authenticated, allowing an attacker to manipulate transmitted object code to the PLC and execute arbitrary machine code on the processor of the PLC's CPU module in the context of the runtime. In the case of at least the NJ series, an RTOS and hardware combination is used that would potentially allow for memory protection and privilege separation and thus limit the impact of code execution. However, it was not confirmed whether these sufficiently segment the runtime from the rest of the RTOS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

28
  • Omron/Nj101 1000 Firmware2 versions
    cpe:2.3:o:omron:nj101-1000_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:omron:nj101-1000_firmware:*:*:*:*:*:*:*:*range: <1.49
    • cpe:2.3:o:omron:nj101-1020_firmware:*:*:*:*:*:*:*:*range: <1.49
  • Omron/Nj101 9000 Firmware2 versions
    cpe:2.3:o:omron:nj101-9000_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:omron:nj101-9000_firmware:*:*:*:*:*:*:*:*range: <1.49
    • cpe:2.3:o:omron:nj101-9020_firmware:*:*:*:*:*:*:*:*range: <1.49
  • Omron/Nj301 1100 Firmware2 versions
    cpe:2.3:o:omron:nj301-1100_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:omron:nj301-1100_firmware:*:*:*:*:*:*:*:*range: <1.49
    • cpe:2.3:o:omron:nj301-1200_firmware:*:*:*:*:*:*:*:*range: <1.49
  • Omron/Nj501 4310 Firmware2 versions
    cpe:2.3:o:omron:nj501-1300_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:omron:nj501-1300_firmware:*:*:*:*:*:*:*:*range: <1.49
    • cpe:2.3:o:omron:nj501-1320_firmware:*:*:*:*:*:*:*:*range: <1.49
  • Omron/Nj501 1340 Firmware3 versions
    cpe:2.3:o:omron:nj501-1340_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:omron:nj501-1340_firmware:*:*:*:*:*:*:*:*range: <1.49
    • cpe:2.3:o:omron:nj501-1420_firmware:*:*:*:*:*:*:*:*range: <1.49
    • cpe:2.3:o:omron:nj501-1520_firmware:*:*:*:*:*:*:*:*range: <1.49
  • Omron/Nj501 1400 Firmware
    cpe:2.3:o:omron:nj501-1400_firmware:*:*:*:*:*:*:*:*
    Range: <1.49
  • Omron/Nj501 4320 Firmware4 versions
    cpe:2.3:o:omron:nj501-1500_firmware:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:omron:nj501-1500_firmware:*:*:*:*:*:*:*:*range: <1.49
    • cpe:2.3:o:omron:nj501-4300_firmware:*:*:*:*:*:*:*:*range: <1.49
    • cpe:2.3:o:omron:nj501-4320_firmware:*:*:*:*:*:*:*:*range: <1.49
    • cpe:2.3:o:omron:nj501-4400_firmware:*:*:*:*:*:*:*:*range: <1.49
  • Omron/Nj501 4500 Firmware
    cpe:2.3:o:omron:nj501-4500_firmware:*:*:*:*:*:*:*:*
    Range: <1.49
  • Omron/Nj501 5300 1 Firmware
    cpe:2.3:o:omron:nj501-5300-1_firmware:*:*:*:*:*:*:*:*
    Range: <1.49
  • Omron/Nj501 5300 Firmware
    cpe:2.3:o:omron:nj501-5300_firmware:*:*:*:*:*:*:*:*
    Range: <1.49
  • Omron/Nx701 1620 Firmware2 versions
    cpe:2.3:o:omron:nx701-1600_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:omron:nx701-1600_firmware:*:*:*:*:*:*:*:*range: <1.29
    • cpe:2.3:o:omron:nx701-1620_firmware:*:*:*:*:*:*:*:*range: <1.29
  • Omron/Nx701 1720 Firmware2 versions
    cpe:2.3:o:omron:nx701-1700_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:omron:nx701-1700_firmware:*:*:*:*:*:*:*:*range: <1.29
    • cpe:2.3:o:omron:nx701-1720_firmware:*:*:*:*:*:*:*:*range: <1.29
  • Omron/Nx701 Z600 Firmware
    cpe:2.3:o:omron:nx701-z600_firmware:*:*:*:*:*:*:*:*
    Range: <1.29
  • Omron/Nx701 Z700 Firmware
    cpe:2.3:o:omron:nx701-z700_firmware:*:*:*:*:*:*:*:*
    Range: <1.29
  • Omron/SYSMAC Nxdescription
  • Omron/SYSMAC Nxllm-fuzzy
    Range: <=2022-005-18
  • Omron/Sysmac Studiollm-fuzzy
    Range: <=2022-005-18

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.