Unitronics VisiLogic OPLC IDE Vulnerabilities (Update A)
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2015-7939US | critical9.6 | — | ||
Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename. | ||||
| CVE-2015-7905US | high7.5 | — | ||
Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors. | ||||
| CVE-2015-6478US | medium6.8 | — | ||
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web sit… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-15-274-02A JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-15-274-02A - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (3)
- MitigationVisiLogic OPLC IDE
Update to the latest software package, VisiLogic V9.8.09 or newer. (http://www.unitronics.com/support/downloads)
http://www.unitronics.com/support/downloads - MitigationVisiLogic OPLC IDE
Update to the latest software package, VisiLogic V9.8.09 or newer. (http://www.unitronics.com/support/downloads)
http://www.unitronics.com/support/downloads - MitigationVisiLogic OPLC IDE
Update to the latest software package, VisiLogic V9.8.09 or newer. (http://www.unitronics.com/support/downloads)
http://www.unitronics.com/support/downloads
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan