Description (CNA)
Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Series. An arbitrary file in the affected product may be accessed or arbitrary code may be executed by processing a specially crafted request sent from a remote attacker with an administrative privilege. As for the details of the affected product names/versions, see the information provided by the vendor under [References] section.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OMRON Corporation / Machine Automation Controller NJ Series | affected NJ101-[][][][] Ver.1.64.03 and earlier |
| OMRON Corporation / Machine Automation Controller NJ Series | affected NJ301-[][][][] Ver.1.64.00 and earlier |
| OMRON Corporation / Machine Automation Controller NJ Series | affected NJ501-1[]0[] Ver.1.64.03 and earlier |
| OMRON Corporation / Machine Automation Controller NJ Series | affected NJ501-1[]2[] Ver.1.64.00 and earlier |
| OMRON Corporation / Machine Automation Controller NJ Series | affected NJ501-1340 Ver.1.64.00 and earlier |
| OMRON Corporation / Machine Automation Controller NJ Series | affected NJ501-4[][][] Ver.1.64.00 and earlier |
| OMRON Corporation / Machine Automation Controller NJ Series | affected NJ501-5300 Ver.1.64.00 and earlier |
| OMRON Corporation / Machine Automation Controller NJ Series | affected NJ501-R[][][] Ver.1.64.00 and earlier |
| OMRON Corporation / Machine Automation Controller NX Series | affected NX1P2-[][][][][][] Ver.1.64.00 and earlier |
| OMRON Corporation / Machine Automation Controller NX Series | affected NX1P2-[][][][][][]1 Ver.1.64.00 and earlier |
| OMRON Corporation / Machine Automation Controller NX Series | affected NX102-[][][][] Ver.1.64.00 and earlier |
| OMRON Corporation / Machine Automation Controller NX Series | affected NX502-[][][][] Ver.1.65.01 and earlier |
| OMRON Corporation / Machine Automation Controller NX Series | affected NX701-[][][][] Ver.1.35.00 and earlier |
| OMRON Corporation / Machine Automation Controller NX Series | affected NX-EIP201 Ver.1.00.01 and earlier |
CWE
No CWE identifiers supplied.
References
- https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-001_en.pdf
- https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2024-001_ja.pdf
- https://jvn.jp/en/vu/JVNVU95852116/index.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.