CVE-2025-1384

Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers

State: Published
Severity: 7.0 High
Published: Jul 13, 2025
Updated: Jul 14, 2025
Reserved: Feb 16, 2025

Description

Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and to execute unauthorized code remotely to the controller products.

Scores

CVSS	Score	Vector	Source
3.1	7.0 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H	OMRON

Weaknesses

CWE-272 Least Privilege Violation

Affected Products

Product	Versions
Machine Automation Controller NJ-seriesOMRON Corporation	NJ101-[][][][] Ver.1.67.00 or lowerAffected
Machine Automation Controller NJ-seriesOMRON Corporation	NJ301-1[]00 Ver.1.67.00 or lowerAffected
Machine Automation Controller NJ-seriesOMRON Corporation	NJ501-1[]00 Ver.1.67.02 or lowerAffected
Machine Automation Controller NJ-seriesOMRON Corporation	NJ501-1[]20 Ver.1.68.01 or lowerAffected
Machine Automation Controller NJ-seriesOMRON Corporation	NJ501-1340 Ver.1.67.00 or lowerAffected
Machine Automation Controller NJ-seriesOMRON Corporation	NJ501-4[][][] Ver.1.67.00 or lowerAffected
Machine Automation Controller NJ-seriesOMRON Corporation	NJ501-5300 Ver.1.67.01 or lowerAffected
Machine Automation Controller NJ-seriesOMRON Corporation	NJ501-R[]00 Ver.1.67.01 or lowerAffected
Machine Automation Controller NJ-seriesOMRON Corporation	NJ501-R[]20 Ver.1.67.00 or lowerAffected
Machine Automation Controller NX-seriesOMRON Corporation	NX102-[][][][] Ver.1.68.01 or lowerAffected
Machine Automation Controller NX-seriesOMRON Corporation	NX1P2-[][][][][][] Ver.1.64.09 or lowerAffected
Machine Automation Controller NX-seriesOMRON Corporation	NX1P2-[][][][][][]1 Ver.1.64.09 or lowerAffected
Machine Automation Controller NX-seriesOMRON Corporation	NX502-[][][][] Ver.1.68.01 or lowerAffected
Machine Automation Controller NX-seriesOMRON Corporation	NX701-[][][][] Ver.1.35.09 or lowerAffected
Sysmac Studio SoftwareOMRON Corporation	SYSMAC-SE2[][][] allAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.