Description (CNA)
Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers. An attacker may use these vulnerabilities to perform unauthorized access and to execute unauthorized code remotely to the controller products.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OMRON Corporation / Machine Automation Controller NJ-series | affected NJ101-[][][][] Ver.1.64.05 and lower |
| OMRON Corporation / Machine Automation Controller NJ-series | affected NJ301-[][][][] Ver.1.64.05 and lower |
| OMRON Corporation / Machine Automation Controller NJ-series | affected NJ501-1[]0[] Ver.1.64.05 and lower |
| OMRON Corporation / Machine Automation Controller NJ-series | affected NJ501-1[]2[] Ver.1.64.04 and lower |
| OMRON Corporation / Machine Automation Controller NJ-series | affected NJ501-1340 Ver.1.64.04 and lower |
| OMRON Corporation / Machine Automation Controller NJ-series | affected NJ501-4[][][] Ver.1.64.04 and lower |
| OMRON Corporation / Machine Automation Controller NJ-series | affected NJ501-5300 Ver.1.64.04 and lower |
| OMRON Corporation / Machine Automation Controller NJ-series | affected NJ501-R[][][] Ver.1.64.04 and lower |
| OMRON Corporation / Machine Automation Controller NX-series | affected NX1P2-[][][][][][] Ver.1.64.04 and lower |
| OMRON Corporation / Machine Automation Controller NX-series | affected NX1P2-[][][][][][]1 Ver.1.64.04 and lower |
| OMRON Corporation / Machine Automation Controller NX-series | affected NX102-[][]0[] Ver.1.64.07 and lower |
| OMRON Corporation / Machine Automation Controller NX-series | affected NX102-[][]2[] Ver.1.64.07 and lower |
| OMRON Corporation / Machine Automation Controller NX-series | affected NX502-[][][][] Ver.1.66.03 and lower |
| OMRON Corporation / Machine Automation Controller NX-series | affected NX701-[][][][] Ver.1.35.04 and lower |
| OMRON Corporation / Machine Automation Controller NX-series | affected NX-EIP201 Ver.1.01.02 and lower |
CWE
CWE-22
References
- https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2025-001_en.pdf
- https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2025-001_ja.pdf
ADP enrichment
No English description supplied.
No references supplied.