Unitronics VisiLogic OPLC IDE Vulnerabilities (Update A)
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-7939US | critical9.6 | — | ||
Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename. | ||||
| CVE-2015-7905US | high7.5 | — | ||
Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors. | ||||
| CVE-2015-6478US | medium6.8 | — | ||
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web sit… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-15-274-02A JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-15-274-02A - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (3)
- MitigationVisiLogic OPLC IDE
Update to the latest software package, VisiLogic V9.8.09 or newer. (http://www.unitronics.com/support/downloads)
http://www.unitronics.com/support/downloads - MitigationVisiLogic OPLC IDE
Update to the latest software package, VisiLogic V9.8.09 or newer. (http://www.unitronics.com/support/downloads)
http://www.unitronics.com/support/downloads - MitigationVisiLogic OPLC IDE
Update to the latest software package, VisiLogic V9.8.09 or newer. (http://www.unitronics.com/support/downloads)
http://www.unitronics.com/support/downloads
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan