Contents

Product Security Incident Response

OMRON Robotics is committed to the security and integrity of our products throughout their lifecycle. Our Product Security Incident Response Team, or PSIRT, is responsible for receiving, assessing, and coordinating responses to potential security vulnerabilities affecting OMRON Robotics products and related software.

This may include vulnerabilities in OMRON-developed software, integrated third-party components, and open-source components used in our products.

Our vulnerability management program is aligned with IEC 62443-4-1 secure product development lifecycle requirements and follows the coordinated vulnerability disclosure principles described in ISO/IEC 29147 and ISO/IEC 30111.

Product security commitment: OMRON Robotics reviews reported cybersecurity issues, coordinates response activities with the appropriate teams, and provides guidance when vulnerabilities may affect customer environments.

Our Approach

When a potential vulnerability is reported, OMRON reviews the information to determine validity, potential impact, affected products or versions, and appropriate next steps.

Our process generally includes:

  • Acknowledgement and review — OMRON reviews submitted vulnerability reports and may contact the reporter for additional technical details, reproduction steps, or supporting evidence.
  • Risk assessment — OMRON evaluates vulnerabilities using industry-standard scoring methods such as CVSS, along with product-specific and operational context. This may include exploitability, network exposure, privilege requirements, potential safety or operational impact, and the likely scope of affected installations.
  • Remediation and mitigation — When a vulnerability is confirmed, OMRON coordinates appropriate response activities. These may include software updates, configuration guidance, workarounds, network-level mitigations, or other recommended countermeasures.
  • Third-party components — OMRON monitors known vulnerabilities in relevant third-party and open-source components used in our products. When applicable, OMRON coordinates with vendors, maintainers, or other relevant parties to assess impact and determine appropriate response actions.
  • Advisory publication — When customer action or awareness is required, OMRON may publish or revise a vulnerability advisory.
Coordinated Vulnerability Handling

OMRON follows a coordinated approach to vulnerability handling. Reports are reviewed by the appropriate internal teams to determine validity, severity, potential customer impact, and recommended next steps.

Where appropriate, OMRON may coordinate with external parties, including security researchers, vendors, industry organizations, or vulnerability coordination bodies.

How reports are handled: OMRON reviews vulnerability reports to determine affected products, potential impact, severity, and appropriate next steps. We may contact the reporter for additional information during the review process.

Customer Guidance

Customers are encouraged to review vulnerability advisories that may apply to their installed OMRON products or software.

Each advisory may include information about affected products, affected versions, potential impact, recommended countermeasures, and available updates.

Customers should evaluate recommendations based on their own system architecture, operating environment, network configuration, and risk profile.

Important note: Cybersecurity risk can vary depending on product configuration, network architecture, connected systems, and operational requirements. Customers should review advisories and security guidance in the context of their specific environment.

In this topic

Report an incident 

If you find a vulnerability in one of our products or services, please report it to the OMRON Product Security Incident Response Team.

Report incident
50-50