Description
Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers. An attacker may use these vulnerabilities to perform unauthorized access and to execute unauthorized code remotely to the controller products.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OMRON | Machine Automation Controller NJ-series | NJ101-[][][][] Ver.1.64.05 and lower, NJ301-[][][][] Ver.1.64.05 and lower, NJ501-1[]0[] Ver.1.64.05 and lower, NJ501-1[]2[] Ver.1.64.04 and lower, NJ501-1340 Ver.1.64.04 and lower, NJ501-4[][][] Ver.1.64.04 and lower, NJ501-5300 Ver.1.64.04 and lower, NJ501-R[][][] Ver.1.64.04 and lower | — |
| OMRON | Machine Automation Controller NX-series | NX1P2-[][][][][][] Ver.1.64.04 and lower, NX1P2-[][][][][][]1 Ver.1.64.04 and lower, NX102-[][]0[] Ver.1.64.07 and lower, NX102-[][]2[] Ver.1.64.07 and lower, NX502-[][][][] Ver.1.66.03 and lower, NX701-[][][][] Ver.1.35.04 and lower, NX-EIP201 Ver.1.01.02 and lower | — |