CVE-2025-1384CWE-272

Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers

High · published July 13, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
17.3
In the wild
Unconfirmed
What it is

Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and to execute unauthorized code remotely to the controller products.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00264 · 17.3th percentile
Weakness
CWE-272 · Least Privilege Violation
Published
2025-07-13T23:42Z
EPSS history
Timeline
  • 13 JUL 23:42Z
    Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers
    cvelistv5