PT-2024-2275 · Unitronics · Unistream +2

Name of the Vulnerable Software and Affected Versions: Unitronics Unistream Unilogic versions prior to 1.35.227 Description: The issue is related to the use of hard-coded passwords, which may allow an attacker to disclose sensitive information embedded inside the device's firmware. This could...

Unitronics Unistream Unilogic Operating System Command Injection Vulnerability

Unitronics Unistream Unilogic is an integrated controller software platform from Unitronics, Inc. for developing and programming the Unistream family of programmable logic controllers PLCs. An operating system command injection vulnerability exists in Unitronics Unistream Unilogic versions prior ...

PT-2024-2272 · Unitronics · Unistream +1

Name of the Vulnerable Software and Affected Versions: Unitronics Unistream Unilogic versions prior to 1.35.227 Description: The issue is related to insufficient protection of service data in the UniLogic Studio software for UniStream series programmable logic controllers. Exploitation of this...

CVE-2024-27772: Improper Neutralization of Special Elements used in an OS Command

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-78: 'OS Command Injection' may allow RCE...

Unitronics Unistream Unilogic Data Forgery Issue Vulnerability

Unitronics Unistream Unilogic is an integrated controller software platform from Unitronics for developing and programming the Unistream family of programmable logic controllers PLCs. A security vulnerability exists in Unitronics Unistream Unilogic versions prior to 1.35.227, which stems from the...

Unitronics Unistream Unilogic Path Traversal Vulnerability

Unitronics Unistream Unilogic is an integrated controller software platform from Unitronics, Inc. for developing and programming the Unistream family of programmable logic controllers PLCs. A path traversal vulnerability exists in Unitronics Unistream Unilogic versions prior to 1.35.227, which...

Unitronics Unistream Unilogic Information Disclosure Vulnerability

Unitronics Unistream Unilogic is an integrated controller software platform from Unitronics, Inc. for developing and programming the Unistream family of programmable logic controllers PLCs. An information disclosure vulnerability exists in Unitronics Unistream Unilogic versions prior to 1.35.227,...

CVE-2024-27769: Exposure of Sensitive Information to an Unauthorized Actor

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor may allow Taking Ownership Over Devices...

CVE-2024-27770: Relative Path Traversal

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-23: Relative Path Traversal...

Unitronics Unistream Unilogic Security Breach

Unitronics Unistream Unilogic is an integrated controller software platform from Unitronics, Inc. for developing and programming the Unistream family of programmable logic controllers PLCs. A security vulnerability exists in Unitronics Unistream Unilogic versions prior to 1.35.227 that stems from...

Unitronics Unistream Unilogic Path Traversal Vulnerability

Unitronics Unistream Unilogic is an integrated controller software platform from Unitronics Corporation for developing and programming the Unistream family of programmable logic controllers PLCs. A security vulnerability exists in Unitronics Unistream Unilogic versions prior to 1.35.227. An...

CVE-2024-27771: Improper Limitation of a Pathname to a Restricted Directory

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE...

Unitronics Unistream Unilogic Path Traversal Vulnerability

Unitronics Unistream Unilogic is an integrated controller software platform from Unitronics for developing and programming the Unistream family of programmable logic controllers PLCs. A path traversal vulnerability exists in Unitronics Unistream Unilogic versions prior to 1.35.227. An attacker ca...

Unitronics VisiLogic < 9.9.00 Default Password

The version of Unitronics VisiLogic installed on the remote host is prior to 9.9.00. It is, therefore, affected by a vulnerability. - Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with networ...

Unitronics VisiLogic Installed (Windows)

Binary data unitronicsvisilogicwininstalled.nbin...

U.S. Sanctions 6 Iranian Officials for Critical Infrastructure Cyber Attacks

The U.S. Treasury Department's Office of Foreign Assets Control OFAC announced sanctions against six officials associated with the Iranian intelligence agency for attacking critical infrastructure entities in the U.S. and other countries. The officials include Hamid Reza Lashgarian, Mahdi...

CISA Releases Three Industrial Control Systems Advisories

CISA released three Industrial Control Systems ICS advisories on January 4, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-004-01 Rockwell Automation FactoryTalk Activation ICSA-24-004-02 Mitsubishi Electric...

Unitronics Vision PLC and HMI Insecure Default Password Vulnerability

Unitronics Vision Series PLCs and HMIs ship with an insecure default password, which if left unchanged, can allow attackers to execute remote commands...

The vulnerability of microprogrammed software in programmable logic controllers and human-machine interfaces of the Unitronics Vision Series allows a perpetrator to gain administrative access to the device.

The vulnerability of microprogrammed software in programmable logic controllers and human-machine interfaces of the Unitronics Vision Series is related to the use of rigidly encoded credentials. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain administrative...

CVE-2023-6448

Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system...