Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2023-2003

Embedded malicious code vulnerability in Unitronics Vision1210

Description

Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a client and executed on the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unitronics Vision1210

Default version status: unaffected

  • 4.3, build 5affected

References