CVE-2024-12083: Path Traversal Vulnerabilities in NJ/NX-series Machine Automation Controllers

Published Jan 14, 2025

Updated

Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers. An attacker may use these vulnerabilities to perform unauthorized access and to execute unauthorized code remotely to the controller products.

Affected Software

1 affected component

Omron NJ/NX-series Machine Automation Controllers

Remediation

Information

The countermeasure against the vulnerabilities can be implemented by updating each product to the countermeasure version. For information on how to obtain and update the firmware for the countermeasure version of the product, please contact our sales office or distributors.

Event History

Jan 14, 2025

CVE Published

via MITRE·12:46 AM

Data Sourced

via MITRE·12:46 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-12083?

CVE-2024-12083 has been classified with a critical severity due to its potential for unauthorized access and remote code execution.

How do I fix CVE-2024-12083?

To mitigate CVE-2024-12083, users should update their NJ/NX-series Machine Automation Controllers to the latest firmware version provided by Omron.

What products are affected by CVE-2024-12083?

CVE-2024-12083 affects NJ/NX-series Machine Automation Controllers manufactured by Omron.

What are the potential impacts of CVE-2024-12083?

The potential impacts of CVE-2024-12083 include unauthorized access to the controller and the possibility of executing unauthorized code.

Is there a known exploit for CVE-2024-12083?

As of now, there are no public exploits available for CVE-2024-12083, but the vulnerability poses a significant risk if not addressed.