Vendors / Unitronics Records 21 All Threatist records
Exploited (KEV) 1
CVSS critical 6
CVSS high 13
Exploited now Unitronics records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 49
Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted filename field in a ZIP archive in a vlp file.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04499 · Published 2016-06-25 · No fix listed CWE-119
Priority MEDIUM 49
Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename.
CVSS 3.0 CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.04962 · Published 2016-01-09 · No fix listed CWE-119
Priority MEDIUM 40
Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04734 · Published 2015-11-13 · No fix listed CWE-94
Priority LOW 33
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site.
CVSS 2.0 MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01553 · Published 2015-11-13 · No fix listed CWE-284
Open these records in search → All records by CVSS severity
6 13 2 0 0
THREATIST.IORead the docs