CVE-2024-1480

Summary: CVE-2024-1480 affects Unitronics Vision Legacy PLCs (Vision 230, 280, 290, 530, 120). Affected component is the Information Mode password handling, where passwords can be retrieved in plaintext without authentication. The root cause is storing passwords in a recoverable format (CWE-257)....

Unitronics Vision Legacy series (Update A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : Unitronics Equipment : Vision Legacy series Vulnerability : Storing Passwords in a Recoverable Format 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker...