CVE-2024-27768 - Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'

CRITICAL

Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'

Published Mar 18, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 0.85%

Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
All versions	affected	<1.35.227

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
0	affected	<1.35.227

Vendor solution

Upgrade to version 1.35.227 or later.

Weaknesses (1)

CWE-22

Path Traversal

Link	Providers	Tags
https://claroty.com/team82/blog/new-critical-vulnerabilities-in-unitronics-unistream-devices-uncovered		Third Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24961		Advisory
https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0		Third Party Advisory