unifiedremote records

2 published records for vendor unifiedremote.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

2 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
60This week	CVE-2022-3229Weaponized	Because the web management interface for Unified Intents' Unified Remote solution does not itself require authentication, a remote, unauthenunifiedremote · unified remote · CWE-285 Pre-auth Auth bypass Broken access control (IDOR)	Critical9.8	—	66.3%	Feb 6, 2023
39Monitor	CVE-2023-52252No exploit	Unified Remote 3.13.0 allows remote attackers to execute arbitrary Lua code because of a wildcarded Access-Control-Allow-Origin for the Remounifiedremote · unified remote · CWE-611 pre-auth RCE XXE	Critical9.8	—	1.1%	Dec 30, 2023

CVE-2022-3229
60This week
Because the web management interface for Unified Intents' Unified Remote solution does not itself require authentication, a remote, unauthen
CriticalCVSS 9.8WeaponizedEPSS 66%
unifiedremote · unified remoteFeb 6, 2023
CVE-2023-52252
39Monitor
Unified Remote 3.13.0 allows remote attackers to execute arbitrary Lua code because of a wildcarded Access-Control-Allow-Origin for the Remo
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- XXE
unifiedremote · unified remoteDec 30, 2023