Vendor
Unitronics
17 known vulnerabilities.
Products
4 results · Clear filters · Feed
-
Critical 9.8
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'
Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE
-
Critical 10.0
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-287: Improper Authentication
CWE-287: Improper Authentication may allow Authentication Bypass
-
Critical 9.8CVE-2023-6448 Exploited
Unitronics VisiLogic uses a default administrative password
Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.
KEV Dec 11, 2023 -
Critical 9.1
Embedded malicious code vulnerability in Unitronics Vision1210
Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a…