Description
Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Series. An arbitrary file in the affected product may be accessed or arbitrary code may be executed by processing a specially crafted request sent from a remote attacker with an administrative privilege. As for the details of the affected product names/versions, see the information provided by the vendor under [References] section.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
OMRON Corporation Machine Automation Controller NJ Series
NJ101-[][][][] Ver.1.64.03 and earlieraffected
OMRON Corporation Machine Automation Controller NJ Series
NJ301-[][][][] Ver.1.64.00 and earlieraffected
OMRON Corporation Machine Automation Controller NJ Series
NJ501-1[]0[] Ver.1.64.03 and earlieraffected
OMRON Corporation Machine Automation Controller NJ Series
NJ501-1[]2[] Ver.1.64.00 and earlieraffected
OMRON Corporation Machine Automation Controller NJ Series
NJ501-1340 Ver.1.64.00 and earlieraffected
OMRON Corporation Machine Automation Controller NJ Series
NJ501-4[][][] Ver.1.64.00 and earlieraffected
OMRON Corporation Machine Automation Controller NJ Series
NJ501-5300 Ver.1.64.00 and earlieraffected
OMRON Corporation Machine Automation Controller NJ Series
NJ501-R[][][] Ver.1.64.00 and earlieraffected
OMRON Corporation Machine Automation Controller NX Series
NX1P2-[][][][][][] Ver.1.64.00 and earlieraffected
OMRON Corporation Machine Automation Controller NX Series
NX1P2-[][][][][][]1 Ver.1.64.00 and earlieraffected
OMRON Corporation Machine Automation Controller NX Series
NX102-[][][][] Ver.1.64.00 and earlieraffected
OMRON Corporation Machine Automation Controller NX Series
NX502-[][][][] Ver.1.65.01 and earlieraffected
OMRON Corporation Machine Automation Controller NX Series
NX701-[][][][] Ver.1.35.00 and earlieraffected
OMRON Corporation Machine Automation Controller NX Series
NX-EIP201 Ver.1.00.01 and earlieraffected