What’s Vulnerable › Vulnerabilities

CVE-2024-12083: Path Traversal Vulnerabilities in NJ/NX-series Machine Automation Controllers

• Severity: medium (CVSS 6.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-01-14 · updated 2026-06-17
• Weakness: CWE-22

Description

Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers. An attacker may use these vulnerabilities to perform unauthorized access and to execute unauthorized code remotely to the controller products.

Affected products

• OMRON Corporation Machine Automation Controller NJ-series: through NJ101-[][][][] Ver.1.64.05; through NJ301-[][][][] Ver.1.64.05; through NJ501-1[]0[] Ver.1.64.05; through NJ501-1[]2[] Ver.1.64.04; through NJ501-1340 Ver.1.64.04; through NJ501-4[][][] Ver.1.64.04
• OMRON Corporation Machine Automation Controller NX-series: through NX1P2-[][][][][][] Ver.1.64.04; through NX1P2-[][][][][][]1 Ver.1.64.04; through NX102-[][]0[] Ver.1.64.07; through NX102-[][]2[] Ver.1.64.07; through NX502-[][][][] Ver.1.66.03; through NX701-[][][][] Ver.1.35.04

References

• https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2025-001_en.pdf
• https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2025-001_ja.pdf

Get alerted when CVE-2024-12083 or the next vulnerability affects your stack