PatchTheCVEunitronics vulnerabilities
Recent CVEs affecting unitronics products. 10 tracked.
unitronics has 10 tracked vulnerabilities, 3 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 10. Most recent: 2024-07-21. Highest priority: CVE-2023-6448 (score 85/100).
- CVE-2024-38435 MEDIUM 6.5 UPGRADE Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of serv
- CVE-2024-27774 HIGH 7.5 UPGRADE Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-259: Use of Hard-coded Password may allow d
- CVE-2024-27773 HIGH 8.8 UPGRADE Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow R
- CVE-2024-27772 HIGH 8.8 UPGRADE Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-78: 'OS Command Injection' may allow RCE
- CVE-2024-27771 HIGH 8.8 UPGRADE Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE
- CVE-2024-27770 HIGH 8.8 UPGRADE Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-23: Relative Path Traversal
- CVE-2024-27769 HIGH 8.8 UPGRADE Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-200: Exposure of Sensitive Information to
- CVE-2024-27768 CRITICAL 9.8 UPGRADE Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE
- CVE-2024-27767 CRITICAL 10.0 UPGRADE CWE-287: Improper Authentication may allow Authentication Bypass
- CVE-2023-6448 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE Unitronics Vision PLC and HMI Insecure Default Password Vulnerability
FAQ
How do I fix unitronics vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is unitronics being exploited right now?
Yes: 1 unitronics CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.
Which unitronics CVE should I patch first?
CVE-2023-6448 currently ranks highest (85/100): Unitronics Vision PLC and HMI Insecure Default Password Vulnerability.