Vulnerability Details CVE-2023-2003
Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a client and executed on the device.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.6%
CVSS Severity
CVSS v3 Score 9.1
References
- https://www.hackplayers.com/2023/07/vulnerabilidad-vision1210-unitronics.html
- https://www.incibe.es/en/incibe-cert/notices/aviso-sci/embedded-malicious-code-vulnerability-unitronics-vision1210
- https://www.hackplayers.com/2023/07/vulnerabilidad-vision1210-unitronics.html
- https://www.incibe.es/en/incibe-cert/notices/aviso-sci/embedded-malicious-code-vulnerability-unitronics-vision1210
Products affected by CVE-2023-2003
-
cpe:2.3:h:unitronicsplc:vision1210:-
-
cpe:2.3:o:unitronicsplc:vision1210_firmware:4.3