Lucene search
INCDVULNRICHMENT:CVE-2024-27772HistoryMar 18, 2024 - 1:28 p.m.
CVE-2024-27772 Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-78: 'OS Command Injection'
2024-03-1813:28:35
CWE-78
INCD
github.com
2
unitronics
unistream
unilogic
cve-2024-27772
vulnerability
os command injection
rce
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Unitronics Unistream Unilogic – Versions prior to 1.35.227 -
CWE-78: ‘OS Command Injection’ may allow RCE
ADP Affected
[
{
"cpes": [
"cpe:2.3:a:unitronics:unistream_unilogic:*:*:*:*:*:*:*:*"
],
"vendor": "unitronics",
"product": "unistream_unilogic",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.35.227",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7
Confidence
Low
SSVC
Exploitation
none
Automatable
no
Technical Impact
total
Related for VULNRICHMENT:CVE-2024-27772