Skip to content
OpenAdvisories
High · 7.8 CVE-2024-23847 EUVD-2024-21286GHSA-w2mp-xqqj-8v36

Incorrect default permissions issue exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary code may be executed …

Published May 31, 2024 · Updated Apr 8, 2025 · Assigned by jpcert

Description

Incorrect default permissions issue exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary code may be executed with LocalSystem privilege. As a result, a malicious program may be installed, data may be altered or deleted.

Affected products

VendorProductAffectedFixed
Yokogawa Rental & Lease Unifier Version.5.0 or later but prior to v5.10.6, and the patch "20240527" not applied —
Yokogawa Rental & Lease Unifier Cast Version.5.0 or later but prior to v5.10.6, and the patch "20240527" not applied, Version.6.0 or later but prior to v6.5.0, and the patch "20240527" not applied —

References