CVE-2022-33208

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who can analyze the communication between the affected controller and automation software 'Sysmac Studio' and/or a Programmable Terminal (PT) to access the controller.

• CWE-294

• https://jvn.jp/en/vu/JVNVU97050784/index.htmlThird Party Advisory, VDB Entry
• https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdfMitigation, Vendor Advisory
• https://jvn.jp/en/vu/JVNVU97050784/index.htmlThird Party Advisory, VDB Entry
• https://www.ia.omron.com/product/vulnerability/OMSR-2022-001_en.pdfMitigation, Vendor Advisory

Published

Jul 4, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-33202Authentication bypass vulnerability in the setup screen of L…8.1
• CVE-2022-33203In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.…7.5
• CVE-2022-33204Four OS command injection vulnerabilities exists in the web …9.9
• CVE-2022-33205Four OS command injection vulnerabilities exists in the web …9.9
• CVE-2022-33206Four OS command injection vulnerabilities exists in the web …9.9
• CVE-2022-33207Four OS command injection vulnerabilities exists in the web …9.9
• CVE-2022-33209Improper input validation in the firmware for some Intel(R) …7.8
• CVE-2022-3321It was possible to bypass Lock WARP switch feature https://…8.2
• CVE-2022-33210Memory corruption in automotive multimedia due to use of out…7.8
• CVE-2022-33211memory corruption in modem due to improper check while calcu…9.8
• CVE-2022-33213Memory corruption in modem due to buffer overflow while proc…8.8
• CVE-2022-33214Memory corruption in display due to time-of-check time-of-us…7