PT-2025-1746 · Nj-Series+1 · Nj Series+1

Published 2025-01-14 · Updated 2025-01-14 · CVE-2024-12083

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Machine Automation Controller NJ-series version 1.64.05 and lower

Description Path Traversal vulnerabilities exist in NJ/NX-series Machine Automation Controllers, allowing an attacker to perform unauthorized access and execute unauthorized code remotely to the controller products.

Recommendations For version 1.64.05 and lower, consider restricting access to sensitive areas of the controller until a patch is available. As a temporary workaround, disabling remote access to the controller can minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-12083

Affected Products

Nj Series

Nfx Series

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-12083 · Security Note
• https://fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2025-001_ja.pdf · Note
• https://t.me/cvenotify/107260 · Telegram Post
• https://fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2025-001_en.pdf · Note
• https://twitter.com/gothburz/status/1879125165608423429 · Twitter Post
• https://twitter.com/CVEnew/status/1878988098035495117 · Twitter Post