Skip to content
OpenAdvisories
Critical · 9.1 CVE-2023-2003 EUVD-2023-33533GHSA-5746-cm3p-frrh

Embedded malicious code vulnerability in Unitronics Vision1210

Published Jul 13, 2023 · Updated Oct 30, 2024 · Assigned by INCIBE

Description

Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a client and executed on the device.

Affected products

VendorProductAffectedFixed
Unitronics Vision1210 4.3, build 5 —

References