Unitronics kayıtları

unitronics üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 1 · %6,7
Silahlaştırılmış: 1 · %6,7
Pre-auth RCE: 4
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: 6 gün

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

15 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
70Bu hafta	CVE-2023-6448Silahlaştırılmış	Unitronics VisiLogic uses a default administrative passwordunitronics · vision1210 firmware · CWE-1188 Kimlik doğrulamasız	Kritik9,8	KEV	%2,1	5 Ara 2023
40Planlayın	CVE-2016-4519İstismar yok	Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted funitronics · visilogic oplc ide · CWE-119 pre-auth RCE Bellek hatası	Kritik9,8	—	%4,5	24 Haz 2016
39İzleyin	CVE-2015-7939İstismar yok	Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp funitronics · visilogic oplc ide · CWE-119 pre-auth RCE Bellek hatası	Kritik9,6	—	%5,0	8 Oca 2016
39İzleyin	CVE-2023-2003İstismar yok	Embedded malicious code vulnerability in Unitronics Vision1210unitronics · vision1210 firmware · CWE-506 Kimlik doğrulamasız	Kritik9,8	—	%0,9	13 Tem 2023
39İzleyin	CVE-2024-27768İstismar yok	Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'unitronics · unilogic · CWE-22 pre-auth RCE Yol geçişi	Kritik9,8	—	%0,9	18 Mar 2024
39İzleyin	CVE-2024-27767İstismar yok	Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-287: Improper Authenticationunitronics · unilogic · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,7	18 Mar 2024
36İzleyin	CVE-2024-27772İstismar yok	Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-78: 'OS Command Injection'unitronics · unilogic · CWE-78 RCE Komut enjeksiyonu	Yüksek8,8	—	%1,7	18 Mar 2024
35İzleyin	CVE-2024-27771İstismar yok	Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'unitronics · unilogic · CWE-22 RCE Yol geçişi	Yüksek8,8	—	%0,8	18 Mar 2024
35İzleyin	CVE-2024-27770İstismar yok	Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-23: Relative Path Traversalunitronics · unilogic · CWE-23 Yol geçişi	Yüksek8,8	—	%0,8	18 Mar 2024
35İzleyin	CVE-2024-27769İstismar yok	Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-200: Exposure of Sensitive Information to an Unauthorized Actorunitronics · unilogic · CWE-200 Bilgi sızıntısı	Yüksek8,8	—	%0,7	18 Mar 2024
35İzleyin	CVE-2024-27773İstismar yok	Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-348: Use of Less Trusted Sourceunitronics · unilogic · CWE-348 RCE	Yüksek8,8	—	%0,4	18 Mar 2024
31İzleyin	CVE-2015-7905İstismar yok	Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors.unitronics · visilogic oplc ide · CWE-94 pre-auth RCE	Yüksek7,5	—	%4,7	12 Kas 2015
30İzleyin	CVE-2024-38435İstismar yok	Unitronics Vision PLC - CWE-703: Improper Check or Handling of Exceptional Conditionsunitronics · visilogic · CWE-703 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%0,4	21 Tem 2024
27İzleyin	CVE-2015-6478İstismar yok	Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unitronics · visilogic oplc ide · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta6,8	—	%1,6	12 Kas 2015
26İzleyin	CVE-2024-27774İstismar yok	Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-259: Use of Hard-coded Passwordunitronics · unilogic · CWE-259 Gömülü kimlik bilgisi	Orta6,5	—	%0,4	18 Mar 2024

CVE-2023-6448
70Bu hafta
Unitronics VisiLogic uses a default administrative password
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %2
- Kimlik doğrulamasız
unitronics · vision1210 firmware5 Ara 2023
CVE-2016-4519
40Planlayın
Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted f
KritikCVSS 9,8İstismar yokEPSS %4
- pre-auth RCE
- Bellek hatası
unitronics · visilogic oplc ide24 Haz 2016
CVE-2015-7939
39İzleyin
Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp f
KritikCVSS 9,6İstismar yokEPSS %5
- pre-auth RCE
- Bellek hatası
unitronics · visilogic oplc ide8 Oca 2016
CVE-2023-2003
39İzleyin
Embedded malicious code vulnerability in Unitronics Vision1210
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
unitronics · vision1210 firmware13 Tem 2023
CVE-2024-27768
39İzleyin
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'
KritikCVSS 9,8İstismar yokEPSS %1
- pre-auth RCE
- Yol geçişi
unitronics · unilogic18 Mar 2024
CVE-2024-27767
39İzleyin
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-287: Improper Authentication
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
unitronics · unilogic18 Mar 2024
CVE-2024-27772
36İzleyin
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-78: 'OS Command Injection'
YüksekCVSS 8,8İstismar yokEPSS %2
- RCE
- Komut enjeksiyonu
unitronics · unilogic18 Mar 2024
CVE-2024-27771
35İzleyin
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Yol geçişi
unitronics · unilogic18 Mar 2024
CVE-2024-27770
35İzleyin
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-23: Relative Path Traversal
YüksekCVSS 8,8İstismar yokEPSS %1
- Yol geçişi
unitronics · unilogic18 Mar 2024
CVE-2024-27769
35İzleyin
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
YüksekCVSS 8,8İstismar yokEPSS %1
- Bilgi sızıntısı
unitronics · unilogic18 Mar 2024
CVE-2024-27773
35İzleyin
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-348: Use of Less Trusted Source
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
unitronics · unilogic18 Mar 2024
CVE-2015-7905
31İzleyin
Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors.
YüksekCVSS 7,5İstismar yokEPSS %5
- pre-auth RCE
unitronics · visilogic oplc ide12 Kas 2015
CVE-2024-38435
30İzleyin
Unitronics Vision PLC - CWE-703: Improper Check or Handling of Exceptional Conditions
YüksekCVSS 7,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
unitronics · visilogic21 Tem 2024
CVE-2015-6478
27İzleyin
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an
OrtaCVSS 6,8İstismar yokEPSS %2
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
unitronics · visilogic oplc ide12 Kas 2015
CVE-2024-27774
26İzleyin
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-259: Use of Hard-coded Password
OrtaCVSS 6,5İstismar yokEPSS %0
- Gömülü kimlik bilgisi
unitronics · unilogic18 Mar 2024