CVE-2023-2003: Embedded malicious code vulnerability in Unitronics Vision1210
Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a client and executed on the device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-2003?
CVE-2023-2003 has been classified with a high severity level due to its potential impact on device integrity and security.
How do I fix CVE-2023-2003?
To fix CVE-2023-2003, update the Vision1210 firmware to the latest version provided by Unitronics that mitigates this vulnerability.
Who is affected by CVE-2023-2003?
CVE-2023-2003 affects users of the Unitronics Vision1210 operating system version 4.3, build 5.
What are the risks associated with CVE-2023-2003?
The main risk associated with CVE-2023-2003 is that remote attackers may execute arbitrary malicious code on the affected device.
Is CVE-2023-2003 publicly known?
Yes, CVE-2023-2003 has been publicly disclosed and is recognized as a vulnerability in the cybersecurity community.