Vulnerability · Published Jul 13, 2025 · Assigned by OMRON
CVE-2025-1384Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers
High 7.0
In plain English
A high-severity security flaw in Machine Automation Controller NJ-series from OMRON Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).
Severity (CVSS 3.1)7.0High
Exploit odds (30 days)0.3%top 81.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and to execute unauthorized code remotely to the controller products.
Affected products (as reported)
Weakness: CWE-272 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H