CVEvulnerability

CVE-2025-1384

7.0 HIGH Published 2025-07-14 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-07-14
Last modified
2026-06-17
Assigner
bba440f9-ef23-4224-aa62-7ac0935d18d1
CVSS 3.1 (bba440f9-ef23-4224-aa62-7ac0935d18d1)
7.0 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Weaknesses
CWE-272

Description

Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and to execute unauthorized code remotely to the controller products.

Related

Weakness · CWE (1)

  • CWE-272 Least Privilege Violation weakness

References