CVE-2015-6478: Medium severity unitronics visilogic vulnerability
Published Nov 13, 2015
·Updated
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site.
Affected Software
1 affected component
Unitronics VisiLogic OPLC IDE<=9.8.0.0
Remediation
Patch Available
Event History
Nov 13, 2015
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-6478?
CVE-2015-6478 has a medium severity rating due to its potential impact on system integrity.
2
How do I fix CVE-2015-6478?
To fix CVE-2015-6478, upgrade to Unitronics VisiLogic OPLC IDE version 9.8.02 or later.
3
Who is affected by CVE-2015-6478?
CVE-2015-6478 affects users of Unitronics VisiLogic OPLC IDE versions prior to 9.8.02.
4
What type of attack is possible with CVE-2015-6478?
CVE-2015-6478 allows remote attackers to exploit the vulnerability via a crafted website to access ActiveX controls.
5
Is there a workaround for CVE-2015-6478?
Currently, the recommended action for CVE-2015-6478 is to update the software, as no reliable workaround is publicly documented.