CVE-2024-27767 Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-287: Improper Authentication

CWE-287: Improper Authentication may allow Authentication Bypass...

PT-2024-2269 · Unitronics · Unilogic

Name of the Vulnerable Software and Affected Versions: Unitronics Unistream Unilogic versions prior to 1.35.227 Description: The issue is related to OS Command Injection, which may allow Remote Code Execution RCE. This is due to the lack of measures to neutralize special elements used in the...

CVE-2024-27773: Use of Less Trusted Source

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow RCE...

CVE-2024-27770: Relative Path Traversal

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-23: Relative Path Traversal...

PT-2024-2272 · Unitronics · Unistream +1

Name of the Vulnerable Software and Affected Versions: Unitronics Unistream Unilogic versions prior to 1.35.227 Description: The issue is related to insufficient protection of service data in the UniLogic Studio software for UniStream series programmable logic controllers. Exploitation of this...

Unitronics Unistream Unilogic Data Forgery Issue Vulnerability

Unitronics Unistream Unilogic is an integrated controller software platform from Unitronics for developing and programming the Unistream family of programmable logic controllers PLCs. A security vulnerability exists in Unitronics Unistream Unilogic versions prior to 1.35.227, which stems from the...

Unitronics Unistream Unilogic Path Traversal Vulnerability

Unitronics Unistream Unilogic is an integrated controller software platform from Unitronics for developing and programming the Unistream family of programmable logic controllers PLCs. A path traversal vulnerability exists in Unitronics Unistream Unilogic versions prior to 1.35.227. An attacker ca...

Unitronics Unistream Unilogic Information Disclosure Vulnerability

Unitronics Unistream Unilogic is an integrated controller software platform from Unitronics, Inc. for developing and programming the Unistream family of programmable logic controllers PLCs. An information disclosure vulnerability exists in Unitronics Unistream Unilogic versions prior to 1.35.227,...

CVE-2024-27771: Improper Limitation of a Pathname to a Restricted Directory

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE...

Unitronics Unistream Unilogic Path Traversal Vulnerability

Unitronics Unistream Unilogic is an integrated controller software platform from Unitronics, Inc. for developing and programming the Unistream family of programmable logic controllers PLCs. A path traversal vulnerability exists in Unitronics Unistream Unilogic versions prior to 1.35.227, which...

CVE-2024-27774: Use of Hard-coded Password

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-259: Use of Hard-coded Password may allow disclosing Sensitive Information Embedded inside Device's Firmware...

CVE-2024-27769: Exposure of Sensitive Information to an Unauthorized Actor

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor may allow Taking Ownership Over Devices...

PT-2024-2275 · Unitronics · Unistream +2

Name of the Vulnerable Software and Affected Versions: Unitronics Unistream Unilogic versions prior to 1.35.227 Description: The issue is related to the use of hard-coded passwords, which may allow an attacker to disclose sensitive information embedded inside the device's firmware. This could...

PT-2024-2270

Name of the Vulnerable Software and Affected Versions Unitronics Unistream Unilogic versions prior to 1.35.227 Description The issue is related to incorrect restriction of a directory path name with limited access, which may allow a remote attacker to execute arbitrary code. This is associated wi...

PT-2024-2271 · Unitronics · Unilogic

Name of the Vulnerable Software and Affected Versions: Unitronics Unistream Unilogic versions prior to 1.35.227 Description: The issue is related to incorrect restriction of a directory path with limited access. Exploitation of this issue may allow a remote attacker to execute arbitrary code. Thi...

Unitronics Unistream Unilogic Path Traversal Vulnerability

Unitronics Unistream Unilogic is an integrated controller software platform from Unitronics Corporation for developing and programming the Unistream family of programmable logic controllers PLCs. A security vulnerability exists in Unitronics Unistream Unilogic versions prior to 1.35.227. An...

Unitronics Unistream Unilogic Trust Management Issues Vulnerabilities

Unitronics Unistream Unilogic is an integrated controller software platform from Unitronics for developing and programming the Unistream family of programmable logic controllers PLCs. A security vulnerability exists in Unitronics Unistream Unilogic versions prior to 1.35.227, which stems from the...

Unitronics Unistream Unilogic Operating System Command Injection Vulnerability

Unitronics Unistream Unilogic is an integrated controller software platform from Unitronics, Inc. for developing and programming the Unistream family of programmable logic controllers PLCs. An operating system command injection vulnerability exists in Unitronics Unistream Unilogic versions prior ...

Unitronics Unistream Unilogic Security Breach

Unitronics Unistream Unilogic is an integrated controller software platform from Unitronics, Inc. for developing and programming the Unistream family of programmable logic controllers PLCs. A security vulnerability exists in Unitronics Unistream Unilogic versions prior to 1.35.227 that stems from...

PT-2024-2273 · Unitronics · Unilogic

Name of the Vulnerable Software and Affected Versions: Unitronics Unistream Unilogic versions prior to 1.35.227 Description: The issue is related to the use of less trusted sources, which may allow remote code execution. Exploitation of this issue could enable a remote attacker to execute arbitra...