{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-1384", "assignerOrgId": "bba440f9-ef23-4224-aa62-7ac0935d18d1", "state": "PUBLISHED", "assignerShortName": "OMRON", "dateReserved": "2025-02-16T23:57:46.232Z", "datePublished": "2025-07-13T23:42:09.953Z", "dateUpdated": "2025-07-14T14:15:23.939Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "packageName": "NJ101-[][][][]", "product": "Machine Automation Controller NJ-series", "vendor": "OMRON Corporation", "versions": [{"status": "affected", "version": "NJ101-[][][][] Ver.1.67.00 or lower"}]}, {"defaultStatus": "unknown", "packageName": "NJ301-1[]00", "product": "Machine Automation Controller NJ-series", "vendor": "OMRON Corporation", "versions": [{"status": "affected", "version": "NJ301-1[]00 Ver.1.67.00 or lower"}]}, {"defaultStatus": "unknown", "packageName": "NJ501-1[]00", "product": "Machine Automation Controller NJ-series", "vendor": "OMRON Corporation", "versions": [{"status": "affected", "version": "NJ501-1[]00 Ver.1.67.02 or lower"}]}, {"defaultStatus": "unknown", "packageName": "NJ501-1[]20", "product": "Machine Automation Controller NJ-series", "vendor": "OMRON Corporation", "versions": [{"status": "affected", "version": "NJ501-1[]20 Ver.1.68.01 or lower"}]}, {"defaultStatus": "unknown", "packageName": "NJ501-1340", "product": "Machine Automation Controller NJ-series", "vendor": "OMRON Corporation", "versions": [{"status": "affected", "version": "NJ501-1340 Ver.1.67.00 or lower"}]}, {"defaultStatus": "unknown", "packageName": "NJ501-4[][][]", "product": "Machine Automation Controller NJ-series", "vendor": "OMRON Corporation", "versions": [{"status": "affected", "version": "NJ501-4[][][] Ver.1.67.00 or lower"}]}, {"defaultStatus": "unknown", "packageName": "NJ501-5300", "product": "Machine Automation Controller NJ-series", "vendor": "OMRON Corporation", "versions": [{"status": "affected", "version": "NJ501-5300 Ver.1.67.01 or lower"}]}, {"defaultStatus": "unknown", "packageName": "NJ501-R[]00", "product": "Machine Automation Controller NJ-series", "vendor": "OMRON Corporation", "versions": [{"status": "affected", "version": "NJ501-R[]00 Ver.1.67.01 or lower"}]}, {"defaultStatus": "unknown", "packageName": "NJ501-R[]20", "product": "Machine Automation Controller NJ-series", "vendor": "OMRON Corporation", "versions": [{"status": "affected", "version": "NJ501-R[]20 Ver.1.67.00 or lower"}]}, {"defaultStatus": "unknown", "packageName": "NX102-[][][][]", "product": "Machine Automation Controller NX-series", "vendor": "OMRON Corporation", "versions": [{"status": "affected", "version": "NX102-[][][][] Ver.1.68.01 or lower"}]}, {"defaultStatus": "unknown", "packageName": "NX1P2-[][][][][][]", "product": "Machine Automation Controller NX-series", "vendor": "OMRON Corporation", "versions": [{"status": "affected", "version": "NX1P2-[][][][][][] Ver.1.64.09 or lower"}]}, {"defaultStatus": "unknown", "packageName": "NX1P2-[][][][][][]1", "product": "Machine Automation Controller NX-series", "vendor": "OMRON Corporation", "versions": [{"status": "affected", "version": "NX1P2-[][][][][][]1 Ver.1.64.09 or lower"}]}, {"defaultStatus": "unknown", "packageName": "NX502-[][][][]", "product": "Machine Automation Controller NX-series", "vendor": "OMRON Corporation", "versions": [{"status": "affected", "version": "NX502-[][][][] Ver.1.68.01 or lower"}]}, {"defaultStatus": "unknown", "packageName": "NX701-[][][][]", "product": "Machine Automation Controller NX-series", "vendor": "OMRON Corporation", "versions": [{"status": "affected", "version": "NX701-[][][][] Ver.1.35.09 or lower"}]}, {"defaultStatus": "unknown", "packageName": "SYSMAC-SE2[][][]", "product": "Sysmac Studio Software", "vendor": "OMRON Corporation", "versions": [{"status": "affected", "version": "SYSMAC-SE2[][][] all"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and to execute unauthorized code remotely to the controller products."}], "value": "Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and to execute unauthorized code remotely to the controller products."}], "impacts": [{"capecId": "CAPEC-122", "descriptions": [{"lang": "en", "value": "CAPEC-122 Privilege Abuse"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-272", "description": "CWE-272 Least Privilege Violation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "bba440f9-ef23-4224-aa62-7ac0935d18d1", "shortName": "OMRON", "dateUpdated": "2025-07-13T23:42:09.953Z"}, "references": [{"url": "https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2025-004_en.pdf"}, {"url": "https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2025-004_ja.pdf"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The countermeasure against the vulnerability can be implemented by updating each product to the countermeasure version and setting the secure communication version 2.<br>For information on how to obtain and update the firmware for the countermeasure version of the product, please contact our sales office or distributors. <br>"}], "value": "The countermeasure against the vulnerability can be implemented by updating each product to the countermeasure version and setting the secure communication version 2.\nFor information on how to obtain and update the firmware for the countermeasure version of the product, please contact our sales office or distributors."}], "source": {"advisory": "OMSR-2025-004", "discovery": "UNKNOWN"}, "title": "Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "OMRON recommends that customers take the following mitigation measures to minimize the risk of exploitation of this vulnerability.<br><br>1. Secure Communication Function<br>The secure communication function can prevent data from being eavesdropped or tampered with by a third party. Secure communication is available in the following CPU Units of the stated versions.<br>- NJ series, NX102, NX1P2 CPU Unit: Version 1.49 or higher<br>- NX701 CPU Unit: Version 1.29 or higher<br>- NX502 CPU Unit: Version 1.60 or higher<br><br>2. Anti-virus protection<br>Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.<br><br>3. Security measures to prevent unauthorized access<br>- Minimize connection of control systems and equipment to open networks, so that untrusted devices will be unable to access them.<br>- Implement firewalls (by shutting down unused communications ports, limiting communications hosts) and isolate them from the IT network.<br>- Use a virtual private network (VPN) for remote access to control systems and equipment.<br>- Use strong passwords and change them frequently.<br>- Install physical controls so that only authorized personnel can access control systems and equipment.<br>- Scan virus to ensure safety of any USB drives or similar devices before connecting them to systems and devices.<br>- Enforce multifactor authentication to all devices with remote access to control systems and equipment whenever possible.<br><br>4. Data input and output protection<br>Validation processing such as backup and range check to cope with unintentional modification of input/output data to control systems and devices.<br><br>5. Data recovery<br>Periodical data backup and maintenance to prepare for data loss.<br>"}], "value": "OMRON recommends that customers take the following mitigation measures to minimize the risk of exploitation of this vulnerability.\n\n1. Secure Communication Function\nThe secure communication function can prevent data from being eavesdropped or tampered with by a third party. Secure communication is available in the following CPU Units of the stated versions.\n- NJ series, NX102, NX1P2 CPU Unit: Version 1.49 or higher\n- NX701 CPU Unit: Version 1.29 or higher\n- NX502 CPU Unit: Version 1.60 or higher\n\n2. Anti-virus protection\nProtect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.\n\n3. Security measures to prevent unauthorized access\n- Minimize connection of control systems and equipment to open networks, so that untrusted devices will be unable to access them.\n- Implement firewalls (by shutting down unused communications ports, limiting communications hosts) and isolate them from the IT network.\n- Use a virtual private network (VPN) for remote access to control systems and equipment.\n- Use strong passwords and change them frequently.\n- Install physical controls so that only authorized personnel can access control systems and equipment.\n- Scan virus to ensure safety of any USB drives or similar devices before connecting them to systems and devices.\n- Enforce multifactor authentication to all devices with remote access to control systems and equipment whenever possible.\n\n4. Data input and output protection\nValidation processing such as backup and range check to cope with unintentional modification of input/output data to control systems and devices.\n\n5. Data recovery\nPeriodical data backup and maintenance to prepare for data loss."}], "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-07-14T14:14:22.828617Z", "id": "CVE-2025-1384", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-14T14:15:23.939Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers", "source": {"advisory": "OMSR-2025-004", "discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-122", "descriptions": [{"lang": "en", "value": "CAPEC-122 Privilege Abuse"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "OMRON Corporation", "product": "Machine Automation Controller NJ-series", "versions": [{"status": "affected", "version": "NJ101-[][][][] Ver.1.67.00 or lower"}], "packageName": "NJ101-[][][][]", "defaultStatus": "unknown"}, {"vendor": "OMRON Corporation", "product": "Machine Automation Controller NJ-series", "versions": [{"status": "affected", "version": "NJ301-1[]00 Ver.1.67.00 or lower"}], "packageName": "NJ301-1[]00", "defaultStatus": "unknown"}, {"vendor": "OMRON Corporation", "product": "Machine Automation Controller NJ-series", "versions": [{"status": "affected", "version": "NJ501-1[]00 Ver.1.67.02 or lower"}], "packageName": "NJ501-1[]00", "defaultStatus": "unknown"}, {"vendor": "OMRON Corporation", "product": "Machine Automation Controller NJ-series", "versions": [{"status": "affected", "version": "NJ501-1[]20 Ver.1.68.01 or lower"}], "packageName": "NJ501-1[]20", "defaultStatus": "unknown"}, {"vendor": "OMRON Corporation", "product": "Machine Automation Controller NJ-series", "versions": [{"status": "affected", "version": "NJ501-1340 Ver.1.67.00 or lower"}], "packageName": "NJ501-1340", "defaultStatus": "unknown"}, {"vendor": "OMRON Corporation", "product": "Machine Automation Controller NJ-series", "versions": [{"status": "affected", "version": "NJ501-4[][][] Ver.1.67.00 or lower"}], "packageName": "NJ501-4[][][]", "defaultStatus": "unknown"}, {"vendor": "OMRON Corporation", "product": "Machine Automation Controller NJ-series", "versions": [{"status": "affected", "version": "NJ501-5300 Ver.1.67.01 or lower"}], "packageName": "NJ501-5300", "defaultStatus": "unknown"}, {"vendor": "OMRON Corporation", "product": "Machine Automation Controller NJ-series", "versions": [{"status": "affected", "version": "NJ501-R[]00 Ver.1.67.01 or lower"}], "packageName": "NJ501-R[]00", "defaultStatus": "unknown"}, {"vendor": "OMRON Corporation", "product": "Machine Automation Controller NJ-series", "versions": [{"status": "affected", "version": "NJ501-R[]20 Ver.1.67.00 or lower"}], "packageName": "NJ501-R[]20", "defaultStatus": "unknown"}, {"vendor": "OMRON Corporation", "product": "Machine Automation Controller NX-series", "versions": [{"status": "affected", "version": "NX102-[][][][] Ver.1.68.01 or lower"}], "packageName": "NX102-[][][][]", "defaultStatus": "unknown"}, {"vendor": "OMRON Corporation", "product": "Machine Automation Controller NX-series", "versions": [{"status": "affected", "version": "NX1P2-[][][][][][] Ver.1.64.09 or lower"}], "packageName": "NX1P2-[][][][][][]", "defaultStatus": "unknown"}, {"vendor": "OMRON Corporation", "product": "Machine Automation Controller NX-series", "versions": [{"status": "affected", "version": "NX1P2-[][][][][][]1 Ver.1.64.09 or lower"}], "packageName": "NX1P2-[][][][][][]1", "defaultStatus": "unknown"}, {"vendor": "OMRON Corporation", "product": "Machine Automation Controller NX-series", "versions": [{"status": "affected", "version": "NX502-[][][][] Ver.1.68.01 or lower"}], "packageName": "NX502-[][][][]", "defaultStatus": "unknown"}, {"vendor": "OMRON Corporation", "product": "Machine Automation Controller NX-series", "versions": [{"status": "affected", "version": "NX701-[][][][] Ver.1.35.09 or lower"}], "packageName": "NX701-[][][][]", "defaultStatus": "unknown"}, {"vendor": "OMRON Corporation", "product": "Sysmac Studio Software", "versions": [{"status": "affected", "version": "SYSMAC-SE2[][][] all"}], "packageName": "SYSMAC-SE2[][][]", "defaultStatus": "unknown"}], "solutions": [{"lang": "en", "value": "The countermeasure against the vulnerability can be implemented by updating each product to the countermeasure version and setting the secure communication version 2.\nFor information on how to obtain and update the firmware for the countermeasure version of the product, please contact our sales office or distributors.", "supportingMedia": [{"type": "text/html", "value": "The countermeasure against the vulnerability can be implemented by updating each product to the countermeasure version and setting the secure communication version 2.<br>For information on how to obtain and update the firmware for the countermeasure version of the product, please contact our sales office or distributors. <br>", "base64": false}]}], "references": [{"url": "https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2025-004_en.pdf"}, {"url": "https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2025-004_ja.pdf"}], "workarounds": [{"lang": "en", "value": "OMRON recommends that customers take the following mitigation measures to minimize the risk of exploitation of this vulnerability.\n\n1. Secure Communication Function\nThe secure communication function can prevent data from being eavesdropped or tampered with by a third party. Secure communication is available in the following CPU Units of the stated versions.\n- NJ series, NX102, NX1P2 CPU Unit: Version 1.49 or higher\n- NX701 CPU Unit: Version 1.29 or higher\n- NX502 CPU Unit: Version 1.60 or higher\n\n2. Anti-virus protection\nProtect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.\n\n3. Security measures to prevent unauthorized access\n- Minimize connection of control systems and equipment to open networks, so that untrusted devices will be unable to access them.\n- Implement firewalls (by shutting down unused communications ports, limiting communications hosts) and isolate them from the IT network.\n- Use a virtual private network (VPN) for remote access to control systems and equipment.\n- Use strong passwords and change them frequently.\n- Install physical controls so that only authorized personnel can access control systems and equipment.\n- Scan virus to ensure safety of any USB drives or similar devices before connecting them to systems and devices.\n- Enforce multifactor authentication to all devices with remote access to control systems and equipment whenever possible.\n\n4. Data input and output protection\nValidation processing such as backup and range check to cope with unintentional modification of input/output data to control systems and devices.\n\n5. Data recovery\nPeriodical data backup and maintenance to prepare for data loss.", "supportingMedia": [{"type": "text/html", "value": "OMRON recommends that customers take the following mitigation measures to minimize the risk of exploitation of this vulnerability.<br><br>1. Secure Communication Function<br>The secure communication function can prevent data from being eavesdropped or tampered with by a third party. Secure communication is available in the following CPU Units of the stated versions.<br>- NJ series, NX102, NX1P2 CPU Unit: Version 1.49 or higher<br>- NX701 CPU Unit: Version 1.29 or higher<br>- NX502 CPU Unit: Version 1.60 or higher<br><br>2. Anti-virus protection<br>Protect any PC with access to the control system against malware and ensure installation and maintenance of up-to-date commercial grade anti-virus software protection.<br><br>3. Security measures to prevent unauthorized access<br>- Minimize connection of control systems and equipment to open networks, so that untrusted devices will be unable to access them.<br>- Implement firewalls (by shutting down unused communications ports, limiting communications hosts) and isolate them from the IT network.<br>- Use a virtual private network (VPN) for remote access to control systems and equipment.<br>- Use strong passwords and change them frequently.<br>- Install physical controls so that only authorized personnel can access control systems and equipment.<br>- Scan virus to ensure safety of any USB drives or similar devices before connecting them to systems and devices.<br>- Enforce multifactor authentication to all devices with remote access to control systems and equipment whenever possible.<br><br>4. Data input and output protection<br>Validation processing such as backup and range check to cope with unintentional modification of input/output data to control systems and devices.<br><br>5. Data recovery<br>Periodical data backup and maintenance to prepare for data loss.<br>", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and to execute unauthorized code remotely to the controller products.", "supportingMedia": [{"type": "text/html", "value": "Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and to execute unauthorized code remotely to the controller products.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-272", "description": "CWE-272 Least Privilege Violation"}]}], "providerMetadata": {"orgId": "bba440f9-ef23-4224-aa62-7ac0935d18d1", "shortName": "OMRON", "dateUpdated": "2025-07-13T23:42:09.953Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-1384", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-07-14T14:14:22.828617Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2025-07-14T14:14:47.119Z"}}]}, "cveMetadata": {"cveId": "CVE-2025-1384", "state": "PUBLISHED", "dateUpdated": "2025-07-13T23:42:09.953Z", "dateReserved": "2025-02-16T23:57:46.232Z", "assignerOrgId": "bba440f9-ef23-4224-aa62-7ac0935d18d1", "datePublished": "2025-07-13T23:42:09.953Z", "assignerShortName": "OMRON"}, "dataVersion": "5.1"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and to execute unauthorized code remotely to the controller products."}, {"lang": "es", "value": "Vulnerabilidad de Least Privilege Violation (CWE-272) en la comunicaci\u00f3n entre los controladores de automatizaci\u00f3n de m\u00e1quinas de la serie NJ/NX y Sysmac Studio Software. Un atacante podr\u00eda aprovechar esta vulnerabilidad para acceder sin autorizaci\u00f3n y ejecutar c\u00f3digo no autorizado de forma remota en los controladores."}], "id": "CVE-2025-1384", "lastModified": "2025-07-15T13:14:24.053", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 4.7, "source": "bba440f9-ef23-4224-aa62-7ac0935d18d1", "type": "Secondary"}]}, "published": "2025-07-14T00:15:22.077", "references": [{"source": "bba440f9-ef23-4224-aa62-7ac0935d18d1", "url": "https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2025-004_en.pdf"}, {"source": "bba440f9-ef23-4224-aa62-7ac0935d18d1", "url": "https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2025-004_ja.pdf"}], "sourceIdentifier": "bba440f9-ef23-4224-aa62-7ac0935d18d1", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-272"}], "source": "bba440f9-ef23-4224-aa62-7ac0935d18d1", "type": "Secondary"}]}

{}