CVE-2024-12083CWE-22

Path Traversal Vulnerabilities in NJ/NX-series Machine Automation Controllers

Medium · published January 14, 2025

CVSS v3.1
6.6
EPSS
1%
Percentile
51.8
In the wild
Unconfirmed
What it is

Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers. An attacker may use these vulnerabilities to perform unauthorized access and to execute unauthorized code remotely to the controller products.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00681 · 51.8th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-01-14T00:46Z
EPSS history
Timeline
  • 14 JAN 00:46Z
    Path Traversal Vulnerabilities in NJ/NX-series Machine Automation Controllers
    cvelistv5