critical9.1
CVE-2023-2003
Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encode…
Impact
Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a client and executed on the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Unitronics | Vision1210 Firmware | Version 4.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.hackplayers.com/2023/07/vulnerabilidad-vision1210-unitronics.html
- https://www.incibe.es/en/incibe-cert/notices/aviso-sci/embedded-malicious-code-vulnerability-unitronics-vision1210
- https://www.hackplayers.com/2023/07/vulnerabilidad-vision1210-unitronics.html
- https://www.incibe.es/en/incibe-cert/notices/aviso-sci/embedded-malicious-code-vulnerability-unitronics-vision1210