CVE-2025-1384

Published: Jul 14, 2025Modified: Jun 17, 2026Deferred

7.0

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Exploitability: 2.2 / Impact: 4.7

Source: bba440f9-ef23-4224-aa62-7ac0935d18d1 (Secondary)

Description

Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and to execute unauthorized code remotely to the controller products.

Related CWEs

CWE-272

Least Privilege Violation

The elevated privilege level required to perform operations such as chroot() should be dropped immediately after the operation is performed.

References (2)

https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2025-004_en.pdf

Source: bba440f9-ef23-4224-aa62-7ac0935d18d1

https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2025-004_ja.pdf

Source: bba440f9-ef23-4224-aa62-7ac0935d18d1

Timeline

No history available yet.