CVE-2025-1384: Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers

Published Jul 13, 2025

Updated

Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and to execute unauthorized code remotely to the controller products.

Affected Software

2 affected components

Omron NJ/NX-series Machine Automation Controllers

Omron Sysmac Studio Software

Remediation

Information

The countermeasure against the vulnerability can be implemented by updating each product to the countermeasure version and setting the secure communication version 2. For information on how to obtain and update the firmware for the countermeasure version of the product, please contact our sales office or distributors.

Event History

Jul 13, 2025

CVE Published

via MITRE·11:42 PM

Data Sourced

via MITRE·11:42 PM

RemedyDescriptionSeverityWeakness

Jul 14, 2025

Data Sourced

via NVD·12:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-1384?

CVE-2025-1384 is classified as a least privilege violation vulnerability.

How do I fix CVE-2025-1384?

To mitigate CVE-2025-1384, update your Omron NJ/NX-series Machine Automation Controllers and Sysmac Studio Software to the latest version.

What products are affected by CVE-2025-1384?

CVE-2025-1384 affects Omron NJ/NX-series Machine Automation Controllers and Omron Sysmac Studio Software.

What can an attacker do with CVE-2025-1384?

An attacker can exploit CVE-2025-1384 to gain unauthorized access and execute unauthorized code remotely.

Is CVE-2025-1384 being actively exploited?

There is no public evidence indicating that CVE-2025-1384 is being actively exploited in the wild, but mitigation is strongly advised.