Description (CNA)
Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and to execute unauthorized code remotely to the controller products.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OMRON Corporation / Machine Automation Controller NJ-series | affected NJ101-[][][][] Ver.1.67.00 or lower |
| OMRON Corporation / Machine Automation Controller NJ-series | affected NJ301-1[]00 Ver.1.67.00 or lower |
| OMRON Corporation / Machine Automation Controller NJ-series | affected NJ501-1[]00 Ver.1.67.02 or lower |
| OMRON Corporation / Machine Automation Controller NJ-series | affected NJ501-1[]20 Ver.1.68.01 or lower |
| OMRON Corporation / Machine Automation Controller NJ-series | affected NJ501-1340 Ver.1.67.00 or lower |
| OMRON Corporation / Machine Automation Controller NJ-series | affected NJ501-4[][][] Ver.1.67.00 or lower |
| OMRON Corporation / Machine Automation Controller NJ-series | affected NJ501-5300 Ver.1.67.01 or lower |
| OMRON Corporation / Machine Automation Controller NJ-series | affected NJ501-R[]00 Ver.1.67.01 or lower |
| OMRON Corporation / Machine Automation Controller NJ-series | affected NJ501-R[]20 Ver.1.67.00 or lower |
| OMRON Corporation / Machine Automation Controller NX-series | affected NX102-[][][][] Ver.1.68.01 or lower |
| OMRON Corporation / Machine Automation Controller NX-series | affected NX1P2-[][][][][][] Ver.1.64.09 or lower |
| OMRON Corporation / Machine Automation Controller NX-series | affected NX1P2-[][][][][][]1 Ver.1.64.09 or lower |
| OMRON Corporation / Machine Automation Controller NX-series | affected NX502-[][][][] Ver.1.68.01 or lower |
| OMRON Corporation / Machine Automation Controller NX-series | affected NX701-[][][][] Ver.1.35.09 or lower |
| OMRON Corporation / Sysmac Studio Software | affected SYSMAC-SE2[][][] all |
CWE
CWE-272
References
- https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2025-004_en.pdf
- https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2025-004_ja.pdf
ADP enrichment
No English description supplied.
No references supplied.