CVE-2022-33208

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.28 and earlier, Machine automation controller NX1 series all models V1.48 and earlier, Automation software 'Sysmac Studio' all models V1.49 and earlier, and Programmable Terminal (PT) NA series NA5-15W/NA5-12W/NA5-9W/NA5-7W models Runtime V1.15 and earlier, which may allow a remote attacker who can analyze the communication between the affected controller and automation software 'Sysmac Studio' and/or a Programmable Terminal (PT) to access the controller.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-294

Affected software

No affected versions have been published.

Timeline

Published: Jul 4, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-332097.8Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially CVE-2022-33218.2It was possible to bypass Lock WARP switch feature https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-s CVE-2022-332107.8Memory corruption in automotive multimedia due to use of out-of-range pointer offset while parsing command request packet with a very large CVE-2022-332119.8memory corruption in modem due to improper check while calculating size of serialized CoAP message CVE-2022-332138.8Memory corruption in modem due to buffer overflow while processing a PPP packet CVE-2022-332147.0Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon C CVE-2022-332165.5Transient Denial-of-service in Automotive due to improper input validation while parsing ELF file.CVE-2022-332177.8Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kern CVE-2022-332187.8Memory corruption in Automotive due to improper input validation.CVE-2022-332197.8Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new listener with shared buffer.CVE-2022-33227.5Lock Warp switch is a feature of Zero Trust platform which, when enabled, prevents users of enrolled devices from disabling WARP client. D CVE-2022-332205.5Information disclosure in Automotive multimedia due to buffer over-read.