2 lines
5.3 KiB
JSON
2 lines
5.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unknown","packageName":"NJ101-[][][][]","product":"Machine Automation Controller NJ-series","vendor":"OMRON Corporation","versions":[{"status":"affected","version":"NJ101-[][][][] Ver.1.67.00 or lower"}]},{"defaultStatus":"unknown","packageName":"NJ301-1[]00","product":"Machine Automation Controller NJ-series","vendor":"OMRON Corporation","versions":[{"status":"affected","version":"NJ301-1[]00 Ver.1.67.00 or lower"}]},{"defaultStatus":"unknown","packageName":"NJ501-1[]00","product":"Machine Automation Controller NJ-series","vendor":"OMRON Corporation","versions":[{"status":"affected","version":"NJ501-1[]00 Ver.1.67.02 or lower"}]},{"defaultStatus":"unknown","packageName":"NJ501-1[]20","product":"Machine Automation Controller NJ-series","vendor":"OMRON Corporation","versions":[{"status":"affected","version":"NJ501-1[]20 Ver.1.68.01 or lower"}]},{"defaultStatus":"unknown","packageName":"NJ501-1340","product":"Machine Automation Controller NJ-series","vendor":"OMRON Corporation","versions":[{"status":"affected","version":"NJ501-1340 Ver.1.67.00 or lower"}]},{"defaultStatus":"unknown","packageName":"NJ501-4[][][]","product":"Machine Automation Controller NJ-series","vendor":"OMRON Corporation","versions":[{"status":"affected","version":"NJ501-4[][][] Ver.1.67.00 or lower"}]},{"defaultStatus":"unknown","packageName":"NJ501-5300","product":"Machine Automation Controller NJ-series","vendor":"OMRON Corporation","versions":[{"status":"affected","version":"NJ501-5300 Ver.1.67.01 or lower"}]},{"defaultStatus":"unknown","packageName":"NJ501-R[]00","product":"Machine Automation Controller NJ-series","vendor":"OMRON Corporation","versions":[{"status":"affected","version":"NJ501-R[]00 Ver.1.67.01 or lower"}]},{"defaultStatus":"unknown","packageName":"NJ501-R[]20","product":"Machine Automation Controller NJ-series","vendor":"OMRON Corporation","versions":[{"status":"affected","version":"NJ501-R[]20 Ver.1.67.00 or lower"}]},{"defaultStatus":"unknown","packageName":"NX102-[][][][]","product":"Machine Automation Controller NX-series","vendor":"OMRON Corporation","versions":[{"status":"affected","version":"NX102-[][][][] Ver.1.68.01 or lower"}]},{"defaultStatus":"unknown","packageName":"NX1P2-[][][][][][]","product":"Machine Automation Controller NX-series","vendor":"OMRON Corporation","versions":[{"status":"affected","version":"NX1P2-[][][][][][] Ver.1.64.09 or lower"}]},{"defaultStatus":"unknown","packageName":"NX1P2-[][][][][][]1","product":"Machine Automation Controller NX-series","vendor":"OMRON Corporation","versions":[{"status":"affected","version":"NX1P2-[][][][][][]1 Ver.1.64.09 or lower"}]},{"defaultStatus":"unknown","packageName":"NX502-[][][][]","product":"Machine Automation Controller NX-series","vendor":"OMRON Corporation","versions":[{"status":"affected","version":"NX502-[][][][] Ver.1.68.01 or lower"}]},{"defaultStatus":"unknown","packageName":"NX701-[][][][]","product":"Machine Automation Controller NX-series","vendor":"OMRON Corporation","versions":[{"status":"affected","version":"NX701-[][][][] Ver.1.35.09 or lower"}]},{"defaultStatus":"unknown","packageName":"SYSMAC-SE2[][][]","product":"Sysmac Studio Software","vendor":"OMRON Corporation","versions":[{"status":"affected","version":"SYSMAC-SE2[][][] all"}]}],"source":"bba440f9-ef23-4224-aa62-7ac0935d18d1"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and to execute unauthorized code remotely to the controller products."},{"lang":"es","value":"Vulnerabilidad de Least Privilege Violation (CWE-272) en la comunicación entre los controladores de automatización de máquinas de la serie NJ/NX y Sysmac Studio Software. Un atacante podría aprovechar esta vulnerabilidad para acceder sin autorización y ejecutar código no autorizado de forma remota en los controladores."}],"id":"CVE-2025-1384","lastModified":"2026-06-17T08:39:02.130","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.0,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":4.7,"source":"bba440f9-ef23-4224-aa62-7ac0935d18d1","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-1384","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-07-14T14:14:22.828617Z","version":"2.0.3"}}]},"published":"2025-07-14T00:15:22.077","references":[{"source":"bba440f9-ef23-4224-aa62-7ac0935d18d1","url":"https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2025-004_en.pdf"},{"source":"bba440f9-ef23-4224-aa62-7ac0935d18d1","url":"https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2025-004_ja.pdf"}],"sourceIdentifier":"bba440f9-ef23-4224-aa62-7ac0935d18d1","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-272"}],"source":"bba440f9-ef23-4224-aa62-7ac0935d18d1","type":"Secondary"}]}
|