CVE-2024-33687

HIGH
Published Jun 24, 2024 Modified Mar 13, 2025 CWE-345

Description

Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product may not be able to detect the alteration.

Is your site exposed to CVE-2024-33687?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness Type (CWE)

CWE-345 CWE-345

Affected Products

Vendor Product
omron nj101-1000_firmware
omron nj101-1000
omron nj101-1020_firmware
omron nj101-1020
omron nj101-9000_firmware
omron nj101-9000
omron nj101-9020_firmware
omron nj101-9020
omron nj301-1100_firmware
omron nj301-1100
omron nj301-1200_firmware
omron nj301-1200
omron nj501-1300_firmware
omron nj501-1300
omron nj501-1320_firmware
omron nj501-1320
omron nj501-1340_firmware
omron nj501-1340
omron nj501-140_firmware
omron nj501-140
omron nj501-1400_firmware
omron nj501-1400
omron nj501-1420_firmware
omron nj501-1420
omron nj501-1500_firmware
omron nj501-1500
omron nj501-1520_firmware
omron nj501-1520
omron nj501-4300_firmware
omron nj501-4300
omron nj501-4310_firmware
omron nj501-4310
omron nj501-4320_firmware
omron nj501-4320
omron nj501-4400_firmware
omron nj501-4400
omron nj501-4500_firmware
omron nj501-4500
omron nj501-5300_firmware
omron nj501-5300
omron nj501-5300-1_firmware
omron nj501-5300-1
omron nj501-r300_firmware
omron nj501-r300
omron nj501-r320_firmware
omron nj501-r320
omron nj501-r400_firmware
omron nj501-r400
omron nj501-r420_firmware
omron nj501-r420
omron nj501-r500_firmware
omron nj501-r500
omron nj501-r520_firmware
omron nj501-r520
omron nj-pa3001_firmware
omron nj-pa3001
omron nj-pd3001_firmware
omron nj-pd3001
omron nx102-1000_firmware
omron nx102-1000
omron nx102-1020_firmware
omron nx102-1020
omron nx102-1100_firmware
omron nx102-1100
omron nx102-1120_firmware
omron nx102-1120
omron nx102-1200_firmware
omron nx102-1200
omron nx102-1220_firmware
omron nx102-1220
omron nx102-9000_firmware
omron nx102-9000
omron nx102-9020_firmware
omron nx102-9020
omron nx1p2-1040dt_firmware
omron nx1p2-1040dt
omron nx1p2-1040dt1_firmware
omron nx1p2-1040dt1
omron nx1p2-1140dt_firmware
omron nx1p2-1140dt
omron nx1p2-1140dt1_firmware
omron nx1p2-1140dt1
omron nx1p2-9024dt_firmware
omron nx1p2-9024dt
omron nx1p2-9024dt1_firmware
omron nx1p2-9024dt1
omron nx1w-adb21_firmware
omron nx1w-adb21
omron nx1w-cif01_firmware
omron nx1w-cif01
omron nx1w-cif11_firmware
omron nx1w-cif11
omron nx1w-cif12_firmware
omron nx1w-cif12
omron nx1w-dab21v_firmware
omron nx1w-dab21v
omron nx1w-mab221_firmware
omron nx1w-mab221
omron nx701-1600_firmware
omron nx701-1600
omron nx701-1620_firmware
omron nx701-1620
omron nx701-1700_firmware
omron nx701-1700
omron nx701-1720_firmware
omron nx701-1720
omron nx701-z600_firmware
omron nx701-z600
omron nx701-z700_firmware
omron nx701-z700

References

Frequently Asked Questions

What is CVE-2024-33687? +
Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit all versions. If a user program in the affected product is altered, the product may not be able to detect the alteration. It has a CVSS v3.1 base score of 7.5 (HIGH).
How severe is CVE-2024-33687? +
CVE-2024-33687 has a CVSS v3.1 score of 7.5 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2024-33687? +
CVE-2024-33687 affects products from omron, specifically: nj-pa3001, nj-pa3001_firmware, nj-pd3001, nj-pd3001_firmware, nj101-1000, nj101-1000_firmware, nj101-1020, nj101-1020_firmware, nj101-9000, nj101-9000_firmware, nj101-9020, nj101-9020_firmware, nj301-1100, nj301-1100_firmware, nj301-1200, nj301-1200_firmware, nj501-1300, nj501-1300_firmware, nj501-1320, nj501-1320_firmware, nj501-1340, nj501-1340_firmware, nj501-140, nj501-1400, nj501-1400_firmware, nj501-140_firmware, nj501-1420, nj501-1420_firmware, nj501-1500, nj501-1500_firmware, nj501-1520, nj501-1520_firmware, nj501-4300, nj501-4300_firmware, nj501-4310, nj501-4310_firmware, nj501-4320, nj501-4320_firmware, nj501-4400, nj501-4400_firmware, nj501-4500, nj501-4500_firmware, nj501-5300, nj501-5300-1, nj501-5300-1_firmware, nj501-5300_firmware, nj501-r300, nj501-r300_firmware, nj501-r320, nj501-r320_firmware, nj501-r400, nj501-r400_firmware, nj501-r420, nj501-r420_firmware, nj501-r500, nj501-r500_firmware, nj501-r520, nj501-r520_firmware, nx102-1000, nx102-1000_firmware, nx102-1020, nx102-1020_firmware, nx102-1100, nx102-1100_firmware, nx102-1120, nx102-1120_firmware, nx102-1200, nx102-1200_firmware, nx102-1220, nx102-1220_firmware, nx102-9000, nx102-9000_firmware, nx102-9020, nx102-9020_firmware, nx1p2-1040dt, nx1p2-1040dt1, nx1p2-1040dt1_firmware, nx1p2-1040dt_firmware, nx1p2-1140dt, nx1p2-1140dt1, nx1p2-1140dt1_firmware, nx1p2-1140dt_firmware, nx1p2-9024dt, nx1p2-9024dt1, nx1p2-9024dt1_firmware, nx1p2-9024dt_firmware, nx1w-adb21, nx1w-adb21_firmware, nx1w-cif01, nx1w-cif01_firmware, nx1w-cif11, nx1w-cif11_firmware, nx1w-cif12, nx1w-cif12_firmware, nx1w-dab21v, nx1w-dab21v_firmware, nx1w-mab221, nx1w-mab221_firmware, nx701-1600, nx701-1600_firmware, nx701-1620, nx701-1620_firmware, nx701-1700, nx701-1700_firmware, nx701-1720, nx701-1720_firmware, nx701-z600, nx701-z600_firmware, nx701-z700, nx701-z700_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-33687? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-33687 — free, no signup required.