Unitronics
17 CVEs across 37 Unitronics products. Browse Unitronics vulnerabilities, severities, and proof-of-concept exploits.
Unitronics products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-38435 | Medium | 6.5 | 2024-07-21 | Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service |
CVE-2024-38434 | Medium | 6.5 | 2024-07-21 | Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass |
CVE-2024-1480 | High | 7.5 | 2024-04-19 | Unitronics Vision Standard line of controllers allow the Information Mode password to be retrieved without authentication. |
CVE-2024-27774 | High | 7.5 | 2024-03-18 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-259: Use of Hard-coded Password may allow disclosing Sensitive Information Embedded inside D… |
CVE-2024-27773 | High | 8.8 | 2024-03-18 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow RCE |
CVE-2024-27772 | High | 8.8 | 2024-03-18 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-78: 'OS Command Injection' may allow RCE |
CVE-2024-27771 | High | 8.8 | 2024-03-18 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE |
CVE-2024-27770 | High | 8.8 | 2024-03-18 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-23: Relative Path Traversal |
CVE-2024-27769 | High | 8.8 | 2024-03-18 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor may allow Taking Ownership… |
CVE-2024-27768 | Critical | 9.8 | 2024-03-18 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE |
CVE-2024-27767 | Critical | 10.0 | 2024-03-18 | CWE-287: Improper Authentication may allow Authentication Bypass |
CVE-2023-6448 | Critical | 9.8 | 2023-12-05 | Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with ne… |
CVE-2023-2003 | Critical | 9.1 | 2023-07-13 | Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encode… |
CVE-2016-4519 | Critical | 9.8 | 2016-06-25 | Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted filename field in a… |
CVE-2015-7939 | Critical | 9.6 | 2016-01-09 | Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename. |
CVE-2015-7905 | | 2015-11-13 | Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors. | |
CVE-2015-6478 | | 2015-11-13 | Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact… |