CVE-2024-27121 - CVE House
Back to Database
Status published Unknown CVE-2024-27121

Path traversal vulnerability exists in Machine Automation Controller NJ Series...

Vulnerability Description

Path traversal vulnerability exists in Machine Automation Controller NJ Series and Machine Automation Controller NX Series. An arbitrary file in the affected product may be accessed or arbitrary code may be executed by processing a specially crafted request sent from a remote attacker with an administrative privilege. As for the details of the affected product names/versions, see the information provided by the vendor under [References] section.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-27121

Credits & Attribution

No credits recorded in the NVD database.

References

More from OMRON Corporation

View All →
CVE-2025-1384
Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers
High 7
CVE-2025-0591
Out-of-bounds Read vulnerability in CX-Programmer
High 7.8
CVE-2024-49501
Sysmac Studio provided by OMRON Corporation contains an incorrect authorization...
Medium 5.7
CVE-2024-33687
Insufficient verification of data authenticity issue exists in NJ Series...
Unknown 0
CVE-2024-31413
Free of pointer not at start of buffer vulnerability exists...
Unknown 0

Affected Vendor

OMRON Corporation

View all reports →

Affected Software

Machine Automation Controller NJ Series , Machine Automation Controller NX Series
Vulnerable Versions:
NJ101-[][][][] Ver.1.64.03 and earlier , NJ301-[][][][] Ver.1.64.00 and earlier , NJ501-1[]0[] Ver.1.64.03 and earlier , NJ501-1[]2[] Ver.1.64.00 and earlier , NJ501-1340 Ver.1.64.00 and earlier , NJ501-4[][][] Ver.1.64.00 and earlier , NJ501-5300 Ver.1.64.00 and earlier , NJ501-R[][][] Ver.1.64.00 and earlier , NX1P2-[][][][][][] Ver.1.64.00 and earlier , NX1P2-[][][][][][]1 Ver.1.64.00 and earlier , NX102-[][][][] Ver.1.64.00 and earlier , NX502-[][][][] Ver.1.65.01 and earlier , NX701-[][][][] Ver.1.35.00 and earlier , NX-EIP201 Ver.1.00.01 and earlier

Timeline

Official Publish: March 12th, 2024
Last Modified: August 16th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.