Description (CNA)
Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a client and executed on the device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unitronics / Vision1210 | affected 4.3, build 5 |
CWE
CWE-506
References
- https://www.incibe.es/en/incibe-cert/notices/aviso-sci/embedded-malicious-code-vulnerability-unitronics-vision1210
- https://www.hackplayers.com/2023/07/vulnerabilidad-vision1210-unitronics.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.