CVE-2024-27768

概要

参考情報

• claroty.com/team82/blog/new-critical-vulnerabilities-in-unitronics-unistream-devices-uncovered · Third Party Advisory
• gov.il/en/departments/dynamiccollectors/cve_advisories_listing · Third Party Advisory

unilogic のその他の脆弱性

• CVE-2024-27774中 6.5 Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-259: Use of Hard-coded Password may allow disclosing Sensitive Informatio…
• CVE-2024-27773高 8.8 Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow RCE
• CVE-2024-27772高 8.8 Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-78: 'OS Command Injection' may allow RCE
• CVE-2024-27771高 8.8 Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE
• CVE-2024-27770高 8.8 Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-23: Relative Path Traversal