CVE-2024-38434

July 21, 2024, 7:15 a.m.

6.5
Medium

Description

Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass

Product(s) Impacted

Product Versions
Unitronics Vision PLC

Weaknesses

CWE-676
Use of Potentially Dangerous Function
The product invokes a potentially dangerous function that could introduce a vulnerability if it is used incorrectly, but the function can also be used safely.

References

https://www.gov.il/en/Departments/faq/cve_advisories

Tags

cna@cyber.gov.il
2024-07-21
CVE-2024-38434
CWE-676

CVSS Score

6.5 / 10

CVSS Data

  • Attack Vector: NETWORK
  • Attack Complexity: LOW
  • Privileges Required: LOW
  • Scope: UNCHANGED
  • Confidentiality Impact: HIGH
  • Integrity Impact: NONE
  • Availability Impact: NONE
    • View Vector String

    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Date

  • Published: July 21, 2024, 7:15 a.m.
  • Last Modified: July 21, 2024, 7:15 a.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cna@cyber.gov.il

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.