CVSS 3.1
7.0 highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:HCVE-2025-1384
High (7.0). EPSS 0.3% chance of exploitation in the next 30 days.
Least Privilege Violation (CWE-272) Vulnerability exists in the communication function between the NJ/NX-series Machine Automation Controllers and the Sysmac Studio Software. An attacker may use this vulnerability to perform unauthorized access and to execute unauthorized code remotely to the controller products.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 18% of CVEs (scores of 2026-10-31)
- CWE
- CWE-272
- Published
- Modified
- Record from
- the NVD, synced