CVE-2024-12083

Published: Jan 14, 2025Modified: Jun 17, 2026Deferred

6.6

Vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.7 / Impact: 5.9

Source: bba440f9-ef23-4224-aa62-7ac0935d18d1 (Secondary)

Description

Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers. An attacker may use these vulnerabilities to perform unauthorized access and to execute unauthorized code remotely to the controller products.

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (2)

https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2025-001_en.pdf

Source: bba440f9-ef23-4224-aa62-7ac0935d18d1

https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2025-001_ja.pdf

Source: bba440f9-ef23-4224-aa62-7ac0935d18d1

Timeline

No history available yet.