ActiveX Control Access Flaw in Unitronics VisiLogic OPLC IDE
CVE-2015-6478

Currently unrated

Key Information:

Vendor

Unitronics

Status
Visilogic Oplc Ide
Vendor
CVE Published:
13 November 2015

What is CVE-2015-6478?

The Unitronics VisiLogic OPLC IDE prior to version 9.8.02 suffers from a security flaw that fails to adequately restrict access to ActiveX controls. This vulnerability can be exploited by remote attackers through a specially crafted website, potentially leading to unauthorized actions on affected systems. Organizations using this software are advised to update to the latest version to mitigate this risk.

References

http://www.zerodayinitiative.com/advisories/ZDI-15-578
x_refsource_MISC
http://www.zerodayinitiative.com/advisories/ZDI-15-579
x_refsource_MISC
http://www.zerodayinitiative.com/advisories/ZDI-15-580
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.