Vulnerability details
CVE-2025-1384
OMRON Machine Automation Controller NJ-seriesOMRON Machine Automation Controller NX-seriesOMRON Sysmac Studio Software
Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers
CVSS 3.1
7.0High
Official description
Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and to execute unauthorized code remotely to the controller products.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.0High | 3.1 | CVEProject cvelistV5 (CNA) (OMRON) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| OMRON Corporation | Machine Automation Controller NJ-series | NJ101-[][][][] Ver.1.67.00 or lower | CVEProject cvelistV5 (CNA) |
| OMRON Corporation | Machine Automation Controller NJ-series | NJ301-1[]00 Ver.1.67.00 or lower | CVEProject cvelistV5 (CNA) |
| OMRON Corporation | Machine Automation Controller NJ-series | NJ501-1340 Ver.1.67.00 or lower | CVEProject cvelistV5 (CNA) |
| OMRON Corporation | Machine Automation Controller NJ-series | NJ501-1[]00 Ver.1.67.02 or lower | CVEProject cvelistV5 (CNA) |
| OMRON Corporation | Machine Automation Controller NJ-series | NJ501-1[]20 Ver.1.68.01 or lower | CVEProject cvelistV5 (CNA) |
| OMRON Corporation | Machine Automation Controller NJ-series | NJ501-4[][][] Ver.1.67.00 or lower | CVEProject cvelistV5 (CNA) |
| OMRON Corporation | Machine Automation Controller NJ-series | NJ501-5300 Ver.1.67.01 or lower | CVEProject cvelistV5 (CNA) |
| OMRON Corporation | Machine Automation Controller NJ-series | NJ501-R[]00 Ver.1.67.01 or lower | CVEProject cvelistV5 (CNA) |
| OMRON Corporation | Machine Automation Controller NJ-series | NJ501-R[]20 Ver.1.67.00 or lower | CVEProject cvelistV5 (CNA) |
| OMRON Corporation | Machine Automation Controller NX-series | NX102-[][][][] Ver.1.68.01 or lower | CVEProject cvelistV5 (CNA) |
| OMRON Corporation | Machine Automation Controller NX-series | NX1P2-[][][][][][] Ver.1.64.09 or lower | CVEProject cvelistV5 (CNA) |
| OMRON Corporation | Machine Automation Controller NX-series | NX1P2-[][][][][][]1 Ver.1.64.09 or lower | CVEProject cvelistV5 (CNA) |
| OMRON Corporation | Machine Automation Controller NX-series | NX502-[][][][] Ver.1.68.01 or lower | CVEProject cvelistV5 (CNA) |
| OMRON Corporation | Machine Automation Controller NX-series | NX701-[][][][] Ver.1.35.09 or lower | CVEProject cvelistV5 (CNA) |
| OMRON Corporation | Sysmac Studio Software | SYSMAC-SE2[][][] all | CVEProject cvelistV5 (CNA) |
References and advisories
2
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-07-14
- Last updated
- 2025-07-14
- State
- Published
- Assigner (CNA)
- OMRON
Exploit prediction (EPSS)
0.26%
Probability of exploitation in 30 days
18.3%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-272Least Privilege Violation