CVE•Published 2022-07-04•Modified 2026-06-02•1 article on news•5 live references•NVD data

CVE-2022-34151Omron · Nx701-1600_firmware

Vulnerability data via NVD (ingested)

CVSS v3.1

8.1

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS percentile

Exploit Prediction Scoring System · top 21% of all CVEs

Weaknesses (CWE)

CWE-798Use of Hard-coded Credentials

Description

Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who successfully obtained the user credentials by analyzing the affected product to access the controller.

Timeline

Published 2022-07-04

Modified 2026-06-02

External references

NVD MITRE Exploit-DB GitHub PoC VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts

vuln:CVE-2022-34151

Hosts Shodan has explicitly fingerprinted as vulnerable.

Shodan · OS

os:"Nx701-1600 Firmware"

Hosts Shodan identified as running Nx701-1600 Firmware.

More intel sources (5)

Shodan report

vuln:CVE-2022-34151

Country / ASN / product breakdown for the vuln query.

Censys

vulnerabilities.cve_id: CVE-2022-34151