CVE-2024-27769: falha de alta gravidade em Unitronics Unistream Unilogic
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8epss 0.7%
Unitronics Unistream Unilogic – Versions prior to 1.35.227 -
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor may allow Taking Ownership Over Devices
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Unitronics · Unistream UnilogicCVEs relacionadas — Unitronics Unistream Unilogic
No mesmo produto, das mais perigosas para as menos.
CVE-2024-27772HIGHUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-78: 'OS Command Injection'EPSS 1.7%CVE-2024-27768CRITICALUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'EPSS 0.9%CVE-2024-27771HIGHUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'EPSS 0.8%CVE-2024-27770HIGHUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-23: Relative Path TraversalEPSS 0.8%CVE-2024-27767CRITICALUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-287: Improper AuthenticationEPSS 0.7%CVE-2024-27774HIGHUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-259: Use of Hard-coded PasswordEPSS 0.4%