CVE-2024-1480CWE-257

Unitronics Vision Standard Unauthenticated Password Retrieval

High · published April 19, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
42.1
In the wild
Unconfirmed
What it is

Unitronics Vision Standard line of controllers allow the Information Mode password to be retrieved without authentication.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00503 · 42.1th percentile
Weakness
CWE-257 · Storing Passwords in a Recoverable Format
Published
2024-04-19T21:19Z
EPSS history
Timeline
  • 19 APR 21:19Z
    Unitronics Vision Standard Unauthenticated Password Retrieval
    cvelistv5