Lucene search

INCDCVE-2024-38435

HistoryJul 21, 2024 - 8:15 a.m.

CVE-2024-38435

2024-07-2108:15:05

CWE-703

INCD

web.nvd.nist.gov

unitronics vision plc

denial of service

vulnerability

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.7%

JSON

Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service

Affected configurations

Nvd

Node

unitronicsvision_plcRange<9.9.1

VendorProductVersionCPE
unitronicsvision_plc*cpe:2.3:a:unitronics:vision_plc:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
unitronics	vision_plc	*	cpe:2.3:a:unitronics:vision_plc::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Vision PLC",
    "vendor": "Unitronics",
    "versions": [
      {
        "lessThan": "Upgrade to v9.9.1",
        "status": "affected",
        "version": "All versions",
        "versionType": "custom"
      }
    ]
  }
]

References

www.gov.il/en/Departments/faq/cve_advisories

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.7%

JSON

Related for CVE-2024-38435