Search vulnerabilities

Results 6

Export CSV
CVE-2023-6448

Unitronics VisiLogic uses a default administrative password

Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.

CVSS 3.1 · 9.8 Critical EPSS 2.1% KEV · Listed
Vendors
Products
CVE-2024-38435

Unitronics Vision PLC - CWE-703: Improper Check or Handling of Exceptional Conditions

Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2015-6478

Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site.

CVSS 2.0 · 6.8 Medium EPSS 1.6% KEV · Not listed
Vendors
CVE-2015-7905

Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 4.7% KEV · Not listed
Vendors
CVE-2015-7939

Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename.

CVSS 3.0 · 9.6 Critical EPSS 5.0% KEV · Not listed
Vendors
CVE-2016-4519

Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted filename field in a ZIP archive in a vlp file.

CVSS 3.0 · 9.8 Critical EPSS 4.5% KEV · Not listed
Vendors