Description (CNA)
Missing authorization vulnerability exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary code may be executed with LocalSystem privilege. As a result, a malicious program may be installed, data may be altered or deleted.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Yokogawa Rental & Lease Corporation / Unifier | affected Version.5.0 or later but prior to v5.10.6; affected and the patch "20240527" not applied |
| Yokogawa Rental & Lease Corporation / Unifier Cast | affected Version.5.0 or later but prior to v5.10.6; affected and the patch "20240527" not applied |
| Yokogawa Rental & Lease Corporation / Unifier Cast | affected Version.6.0 or later but prior to v6.5.0; affected and the patch "20240527" not applied |
CWE
CWE-862
References
- https://www.yrl.com/fwp_support/info/khvu7f00000000q7.html
- https://www.yrl.com/fwp_support/info/khvu7f00000007j8.html
- https://www.yrl.com/fwp_support/info/khvu7f0000000auf.html
- https://jvn.jp/en/jp/JVN17680667/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.