Sysmac Studio

Vendor:

First CVE: Jul 4, 2022 · Active for 4 years

4
Total CVEs
More Total CVEs than 72% of tracked products
2.0
Avg CVEs / Year
Higher CVE frequency than 60% of tracked products
8.0
Avg CVSS
Higher Avg CVSS than 68% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Sysmac Studio over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jul 4, 2022
4 years ago
Most Recent CVE
Jan 22, 2024
914 days ago

CVE Severity & Scoring

Sysmac Studio4 CVEs
All CVEs352,231 CVEs
High
Attack Vector
Local2 (50.0%)
Network2 (50.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low2 (50.0%)
High2 (50.0%)
Unknown0 (0.0%)
User Interaction
None3 (75.0%)
Unknown0 (0.0%)
Required1 (25.0%)
Privileges Required
Low1 (25.0%)
High0 (0.0%)
None3 (75.0%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (4 CVEs).

4 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Use of hard-coded credentials vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all models V1.
Jul 4, 20228.127NONO
Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all
Jul 4, 20228.127NONO
Project files may contain malicious contents which the software will use to create files on the filesystem. This allows directory traversal and overwriting files with the privilege
Jan 22, 20247.820NONO
Sysmac Studio installs executables in a directory with poor permissions. This can allow a locally-authenticated attacker to overwrite files which will result in code execution with
Jan 10, 20247.819NONO

Exploit Exposure

Signals from CVEs in this product scope (4 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (4 CVEs).

Media Mentions

Signals from CVEs in this product scope (4 CVEs).

Top CNAs Publishing CVEs For Sysmac Studio

Top CWEs

Versions

No cataloged versions.