PT-2018-17677 · Omron · Omron Ns

Capitan Alfalo · Published 2018-02-05 · Updated 2019-10-03 · CVE-2018-6624

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OMRON NS devices versions 1.1 through 1.3

Description The issue allows remote attackers to bypass authentication by making a direct request to the .html file for a specific screen. For example, this can be achieved by accessing the "monitor.html" file.

Recommendations For OMRON NS devices versions 1.1 through 1.3, consider restricting direct access to .html files for specific screens, such as "monitor.html", until a patch is available.

Fix

Weakness Enumeration

CWE-425

Related Identifiers

CVE-2018-6624

Affected Products

Omron Ns

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-6624 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6624 · Vendor Advisory
• http://misteralfa-hack.blogspot.cl/2018/02/otomron-login-bypass.html · Note