Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-36246 EUVD-2024-35997GHSA-4qq8-w3q5-56jf

Missing authorization vulnerability exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary code may be executed …

Published May 31, 2024 · Updated Apr 8, 2025 · Assigned by jpcert

Description

Missing authorization vulnerability exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary code may be executed with LocalSystem privilege. As a result, a malicious program may be installed, data may be altered or deleted.

Affected products

VendorProductAffectedFixed
Yokogawa Rental & Lease Unifier Version.5.0 or later but prior to v5.10.6, and the patch "20240527" not applied —
Yokogawa Rental & Lease Unifier Cast Version.5.0 or later but prior to v5.10.6, and the patch "20240527" not applied, Version.6.0 or later but prior to v6.5.0, and the patch "20240527" not applied —

References