Unitronics

Records21All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

Unitronics records in CISA KEV

TI-2023-05916 Unitronics Vision PLC and HMI Insecure Default Password Vulnerability CRITICAL 100KEV 2023-12-11

Components

Products in the NVD configurations · select one to filter the records

Unilogic 8 records MEDIUM Visilogic Oplc Ide 4 records MEDIUM Visilogic 2 records CRITICAL Vision1210 Firmware 2 records CRITICAL Samba 3.5 Firmware 1 record CRITICAL Samba 4.3 Firmware 1 record CRITICAL Samba 7 Firmware 1 record CRITICAL Vision1040 Firmware 1 record CRITICAL

Records

8 records in Unilogic · all components

TI-2024-18391 CVE-2024-27772 · GHSA-53mx-3pm9-mw2c

Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-78: 'OS Command Injection'

MEDIUM 44

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-78: 'OS Command Injection' may allow RCE

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01731 Published 2024-03-18 Fixed in 1.35.227 CWE-78

TI-2024-18387 CVE-2024-27768 · GHSA-73cx-h5g5-4948

Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'

MEDIUM 44

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00854 Published 2024-03-18 Fixed in 1.35.227 CWE-22

TI-2024-18386 CVE-2024-27767 · GHSA-p952-pxm2-8h77

Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-287: Improper Authentication

MEDIUM 44

CWE-287: Improper Authentication may allow Authentication Bypass

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00684 Published 2024-03-18 Fixed in 1.35.227 CWE-287

TI-2024-18388 CVE-2024-27769 · GHSA-895h-cjjh-m689

Information disclosure in Unitronics Unistream Unilogic

MEDIUM 41

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor may allow Taking Ownership Over Devices

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00711 Published 2024-03-18 Fixed in 1.35.227 CWE-200

TI-2024-18392 CVE-2024-27773 · GHSA-w38v-jxmp-5hf2

Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-348: Use of Less Trusted Source

MEDIUM 40

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow RCE

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00355 Published 2024-03-18 Fixed in 1.35.227 CWE-348

TI-2024-18390 CVE-2024-27771 · GHSA-795m-837f-fqjg

Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'

MEDIUM 40

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0081 Published 2024-03-18 Fixed in 1.35.227 CWE-22

TI-2024-18389 CVE-2024-27770 · GHSA-mcm9-r2mh-ch63

Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-23: Relative Path Traversal

LOW 39

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-23: Relative Path Traversal

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00794 Published 2024-03-18 Fixed in 1.35.227 CWE-23

TI-2024-18393 CVE-2024-27774 · GHSA-44h2-5m7j-cgw4

Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-259: Use of Hard-coded Password

LOW 35

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-259: Use of Hard-coded Password may allow disclosing Sensitive Information Embedded inside Device's Firmware

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00431 Published 2024-03-18 Fixed in 1.35.227 CWE-259

Open these records in search →

Critical	6
High	13
Medium	2
Low	0
No CVSS	0