Least Privilege Violation in NJ/NX-series Machine Automation Controllers by Omron
CVE-2025-1384
7HIGH
What is CVE-2025-1384?
A vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and Sysmac Studio Software. This flaw allows attackers to exploit least privilege violations, potentially gaining unauthorized access to the controller and executing remote code. It is crucial for users of these products to address this vulnerability to ensure the security of their operations and prevent unauthorized manipulation.
Affected Version(s)
Machine Automation Controller NJ-series NJ101-[][][][] Ver.1.67.00 or lower
Machine Automation Controller NJ-series NJ301-1[]00 Ver.1.67.00 or lower
Machine Automation Controller NJ-series NJ501-1[]00 Ver.1.67.02 or lower