Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-36246

Missing authorization vulnerability exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary code may be executed with LocalSystem privilege. As a result,

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

Missing authorization vulnerability exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary code may be executed with LocalSystem privilege. As a result, a malicious program may be installed, data may be altered or deleted.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Yokogawa Rental & Lease Corporation Unifier

  • Version.5.0 or later but prior to v5.10.6affected
  • and the patch "20240527" not appliedaffected

Yokogawa Rental & Lease Corporation Unifier Cast

  • Version.5.0 or later but prior to v5.10.6affected
  • and the patch "20240527" not appliedaffected

Yokogawa Rental & Lease Corporation Unifier Cast

  • Version.6.0 or later but prior to v6.5.0affected
  • and the patch "20240527" not appliedaffected

References