6.5
CVE-2024-38434
- EPSS 0.44%
- Veröffentlicht 21.07.2024 07:15:05
- Zuletzt bearbeitet 15.04.2026 00:35:42
- Quelle cna@cyber.gov.il
- CVE-Watchlists
- Unerledigt
Unitronics Vision PLC - CWE-676: Use of Potentially Dangerous Function
Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerUnitronics
≫
Produkt
Vision PLC
Default Statusunaffected
Version
All versions
Version <
Upgrade to v9.9.1
Status
affected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.44% | 0.348 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| cna@cyber.gov.il | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
CWE-676 Use of Potentially Dangerous Function
The product invokes a potentially dangerous function that could introduce a vulnerability if it is used incorrectly, but the function can also be used safely.
https://www.gov.il/en/Departments/faq/cve_advisories