CVE-2014-2369: Omron NS Series HMI Cross-Site Request Forgery

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-07-24 · updated 2026-06-17
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in the web application on Omron NS5, NS8, NS10, NS12, and NS15 HMI terminals 8.1xx through 8.68x allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Affected products

Omron Ns10 Hmi Terminal: all versions
Omron Ns12 Hmi Terminal: all versions
Omron Ns15 Hmi Terminal: all versions
Omron Ns5 Hmi Terminal: all versions
Omron Ns8 Hmi Terminal: all versions
Omron Ns Series System Program Firmware: 8.1, 8.68

References

https://automation.omron.com/en/us/products/
https://www.cisa.gov/news-events/ics-advisories/icsa-14-203-01
http://ics-cert.us-cert.gov/advisories/ICSA-14-203-01

Get alerted when CVE-2014-2369 or the next vulnerability affects your stack