Vulnerabilities in Unitronics
13 resultsVexday analysis
Unitronics apresenta 13 vulnerabilidades registradas, com apenas 1 sob ataque ativo confirmado (KEV), sendo 4 de severidade crítica. A fraqueza predominante é path traversal (CWE-22), padrão típico em controladores industriais. Sem publicações recentes nos últimos 90 dias, o risco mantém-se estável, embora a presença de críticas exija atenção contínua no contexto de ambientes de controle industrial.
CVE-2023-6448CRITICALUnitronics VisiLogic uses a default administrative passwordEPSS 2.1%KEVCVE-2024-27772HIGHUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-78: 'OS Command Injection'EPSS 1.7%CVE-2023-2003CRITICALEmbedded malicious code vulnerability in Unitronics Vision1210EPSS 0.9%CVE-2024-27768CRITICALUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'EPSS 0.9%CVE-2024-27771HIGHUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'EPSS 0.8%CVE-2024-27770HIGHUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-23: Relative Path TraversalEPSS 0.8%CVE-2024-27769HIGHUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-200: Exposure of Sensitive Information to an Unauthorized ActorEPSS 0.7%CVE-2024-27767CRITICALUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-287: Improper AuthenticationEPSS 0.7%CVE-2024-1480HIGHUnitronics Vision Standard Unauthenticated Password RetrievalEPSS 0.5%CVE-2024-38435MEDIUMUnitronics Vision PLC - CWE-703: Improper Check or Handling of Exceptional ConditionsEPSS 0.4%CVE-2024-38434MEDIUMUnitronics Vision PLC - CWE-676: Use of Potentially Dangerous FunctionEPSS 0.4%CVE-2024-27774HIGHUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-259: Use of Hard-coded PasswordEPSS 0.4%CVE-2024-27773HIGHUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-348: Use of Less Trusted SourceEPSS 0.4%