Unitronics records

15 published records for vendor unitronics.

Researcher profile

Entered KEV: 1 · 6.7%
Weaponized: 1 · 6.7%
Pre-auth RCE: 4
With a fix record: 0%
Median publish → KEV: 6 days

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

15 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
70This week	CVE-2023-6448Weaponized	Unitronics VisiLogic uses a default administrative passwordunitronics · vision1210 firmware · CWE-1188 Pre-auth	Critical9.8	KEV	2.1%	Dec 5, 2023
40Plan	CVE-2016-4519No exploit	Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted funitronics · visilogic oplc ide · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	4.5%	Jun 24, 2016
39Monitor	CVE-2015-7939No exploit	Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp funitronics · visilogic oplc ide · CWE-119 pre-auth RCE Memory safety	Critical9.6	—	5.0%	Jan 8, 2016
39Monitor	CVE-2023-2003No exploit	Embedded malicious code vulnerability in Unitronics Vision1210unitronics · vision1210 firmware · CWE-506 Pre-auth	Critical9.8	—	0.9%	Jul 13, 2023
39Monitor	CVE-2024-27768No exploit	Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'unitronics · unilogic · CWE-22 pre-auth RCE Path traversal	Critical9.8	—	0.9%	Mar 18, 2024
39Monitor	CVE-2024-27767No exploit	Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-287: Improper Authenticationunitronics · unilogic · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.7%	Mar 18, 2024
36Monitor	CVE-2024-27772No exploit	Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-78: 'OS Command Injection'unitronics · unilogic · CWE-78 RCE Command injection	High8.8	—	1.7%	Mar 18, 2024
35Monitor	CVE-2024-27771No exploit	Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'unitronics · unilogic · CWE-22 RCE Path traversal	High8.8	—	0.8%	Mar 18, 2024
35Monitor	CVE-2024-27770No exploit	Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-23: Relative Path Traversalunitronics · unilogic · CWE-23 Path traversal	High8.8	—	0.8%	Mar 18, 2024
35Monitor	CVE-2024-27769No exploit	Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-200: Exposure of Sensitive Information to an Unauthorized Actorunitronics · unilogic · CWE-200 Info leak	High8.8	—	0.7%	Mar 18, 2024
35Monitor	CVE-2024-27773No exploit	Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-348: Use of Less Trusted Sourceunitronics · unilogic · CWE-348 RCE	High8.8	—	0.4%	Mar 18, 2024
31Monitor	CVE-2015-7905No exploit	Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors.unitronics · visilogic oplc ide · CWE-94 pre-auth RCE	High7.5	—	4.7%	Nov 12, 2015
30Monitor	CVE-2024-38435No exploit	Unitronics Vision PLC - CWE-703: Improper Check or Handling of Exceptional Conditionsunitronics · visilogic · CWE-703 Pre-auth Denial of service	High7.5	—	0.4%	Jul 21, 2024
27Monitor	CVE-2015-6478No exploit	Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unitronics · visilogic oplc ide · CWE-284 Pre-auth Broken access control (IDOR)	Medium6.8	—	1.6%	Nov 12, 2015
26Monitor	CVE-2024-27774No exploit	Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-259: Use of Hard-coded Passwordunitronics · unilogic · CWE-259 Hard-coded credentials	Medium6.5	—	0.4%	Mar 18, 2024

CVE-2023-6448
70This week
Unitronics VisiLogic uses a default administrative password
CriticalCVSS 9.8KEVWeaponizedEPSS 2%
- Pre-auth
unitronics · vision1210 firmwareDec 5, 2023
CVE-2016-4519
40Plan
Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted f
CriticalCVSS 9.8No exploitEPSS 4%
- pre-auth RCE
- Memory safety
unitronics · visilogic oplc ideJun 24, 2016
CVE-2015-7939
39Monitor
Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp f
CriticalCVSS 9.6No exploitEPSS 5%
- pre-auth RCE
- Memory safety
unitronics · visilogic oplc ideJan 8, 2016
CVE-2023-2003
39Monitor
Embedded malicious code vulnerability in Unitronics Vision1210
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
unitronics · vision1210 firmwareJul 13, 2023
CVE-2024-27768
39Monitor
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Path traversal
unitronics · unilogicMar 18, 2024
CVE-2024-27767
39Monitor
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-287: Improper Authentication
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
unitronics · unilogicMar 18, 2024
CVE-2024-27772
36Monitor
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-78: 'OS Command Injection'
HighCVSS 8.8No exploitEPSS 2%
- RCE
- Command injection
unitronics · unilogicMar 18, 2024
CVE-2024-27771
35Monitor
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Path traversal
unitronics · unilogicMar 18, 2024
CVE-2024-27770
35Monitor
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-23: Relative Path Traversal
HighCVSS 8.8No exploitEPSS 1%
- Path traversal
unitronics · unilogicMar 18, 2024
CVE-2024-27769
35Monitor
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
HighCVSS 8.8No exploitEPSS 1%
- Info leak
unitronics · unilogicMar 18, 2024
CVE-2024-27773
35Monitor
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-348: Use of Less Trusted Source
HighCVSS 8.8No exploitEPSS 0%
- RCE
unitronics · unilogicMar 18, 2024
CVE-2015-7905
31Monitor
Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors.
HighCVSS 7.5No exploitEPSS 5%
- pre-auth RCE
unitronics · visilogic oplc ideNov 12, 2015
CVE-2024-38435
30Monitor
Unitronics Vision PLC - CWE-703: Improper Check or Handling of Exceptional Conditions
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
unitronics · visilogicJul 21, 2024
CVE-2015-6478
27Monitor
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an
MediumCVSS 6.8No exploitEPSS 2%
- Pre-auth
- Broken access control (IDOR)
unitronics · visilogic oplc ideNov 12, 2015
CVE-2024-27774
26Monitor
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-259: Use of Hard-coded Password
MediumCVSS 6.5No exploitEPSS 0%
- Hard-coded credentials
unitronics · unilogicMar 18, 2024