Lucene search

Unitronics Security Vulnerabilities

cve

CVE-2015-6478

Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site.

6.6AI Score

0.164EPSS

2015-11-13 03:59 AM

cve

CVE-2015-7905

Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors.

7.2AI Score

0.326EPSS

2015-11-13 03:59 AM

cve

CVE-2015-7939

Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename.

9.6CVSS

9.7AI Score

0.601EPSS

2016-01-09 02:59 AM

cve

CVE-2016-4519

Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted filename field in a ZIP archive in a vlp file.

9.8CVSS

9.7AI Score

0.1EPSS

2016-06-25 01:59 AM

cve

CVE-2023-6448

Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.

9.8CVSS

9.4AI Score

0.039EPSS

2023-12-05 06:15 PM

183

In Wild

cve

CVE-2024-38435

Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service

7.5CVSS

6.5AI Score

0.0005EPSS

2024-07-21 08:15 AM