CVE-2018-6624

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-05 · updated 2026-06-17
Weakness: CWE-425

Description

OMRON NS devices 1.1 through 1.3 allow remote attackers to bypass authentication via a direct request to the .html file for a specific screen, as demonstrated by monitor.html.

Affected products

Omron Ns Series Firmware: from 1.1 through 1.3

References

http://misteralfa-hack.blogspot.cl/2018/02/otomron-login-bypass.html
http://misteralfa-hack.blogspot.cl/2018/02/otomron-login-bypass.html

Get alerted when CVE-2018-6624 or the next vulnerability affects your stack