CVE-2023-2003 Embedded malicious code vulnerability in Unitronics Vision1210
CriticalCVSS 9.8
EPSS 0.92%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a client and executed on the device.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Unitronics Vision1210 | = 4.3, build 5 | No fix listed |
| Unitronics vision1210 firmware | = 4.3-build_5 | No fix listed |
References
- www.incibe.es third-party-advisory
- www.hackplayers.com related technical-description third-party-advisory