Vulnerabilities > Unitronics > Unilogic

DATE CVE VULNERABILITY TITLE RISK
2024-03-18 CVE-2024-27767 Unspecified vulnerability in Unitronics Unilogic
CWE-287: Improper Authentication may allow Authentication Bypass
network
low complexity
unitronics
critical
9.8
2024-03-18 CVE-2024-27768 Unspecified vulnerability in Unitronics Unilogic
Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE
network
low complexity
unitronics
critical
9.8
2024-03-18 CVE-2024-27769 Unspecified vulnerability in Unitronics Unilogic
Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor may allow Taking Ownership Over Devices
network
low complexity
unitronics
8.8
2024-03-18 CVE-2024-27770 Path Traversal vulnerability in Unitronics Unilogic
Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-23: Relative Path Traversal
network
low complexity
unitronics CWE-22
8.8
2024-03-18 CVE-2024-27771 Unspecified vulnerability in Unitronics Unilogic
Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE
network
low complexity
unitronics
8.8
2024-03-18 CVE-2024-27772 Unspecified vulnerability in Unitronics Unilogic
Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-78: 'OS Command Injection' may allow RCE
network
low complexity
unitronics
8.8
2024-03-18 CVE-2024-27773 Insufficient Verification of Data Authenticity vulnerability in Unitronics Unilogic
Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow RCE
network
low complexity
unitronics CWE-345
8.8
2024-03-18 CVE-2024-27774 Use of Hard-coded Credentials vulnerability in Unitronics Unilogic
Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-259: Use of Hard-coded Password may allow disclosing Sensitive Information Embedded inside Device's Firmware
network
low complexity
unitronics CWE-798
6.5