CVE-2014-2369
Cross-site request forgery (CSRF) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
Published:Jul 24, 2014
Last Modified:Oct 6, 2025
EPS:Jul 24, 2014
EPSS Score:0.00067
CVSS Score:4.6
Affected Products
Vendor
Product
Action
Vendor
Omron
Product
Ns10 Hmi Terminal
Omron
Ns10 Hmi Terminal
Vendor
Omron
Product
Ns12 Hmi Terminal
Omron
Ns12 Hmi Terminal
Vendor
Omron
Product
Ns15 Hmi Terminal
Omron
Ns15 Hmi Terminal
Vendor
Omron
Product
Ns5 Hmi Terminal
Omron
Ns5 Hmi Terminal
Vendor
Omron
Product
Ns8 Hmi Terminal
Omron
Ns8 Hmi Terminal
Vendor
Omron
Product
Ns Series System Program Firmware
Omron
Ns Series System Program Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
