CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“2 of 2 advisories (Page 1/1)
CVE-2023-64489.8/CRITICALEPSS 2.1%CISA KEV
2023-12-05

Unitronics VisiLogic and Vision/Samba PLC Hardcoded Default Administrative Password Vulnerability (CVE-2023-6448) Security Advisory

[Affected Scope] Unitronics Vision and Samba PLCs and HMIs configured using VisiLogic versions prior to 9.9.00

[Impact] Unauthenticated remote attackers with network access can exploit default administrative credentials to gain full control of the target system

[Mitigation] Upgrade VisiLogic to version 9.9.00 or later, change default passwords immediately, and restrict external network exposure

CVE-2023-381807.5/HIGHEPSS 14.1%CISA KEV
2023-08-08

Microsoft .NET and Visual Studio Remote Denial of Service Vulnerability (CVE-2023-38180) Analysis & Mitigation Guide

[Affected Scope] .NET 6.0, .NET 7.0, ASP.NET Core, and Microsoft Visual Studio 2022 environments

[Impact] Unauthenticated remote attackers can trigger resource exhaustion (CPU/Memory) via crafted HTTP requests, leading to a complete Denial of Service (DoS)

[Mitigation] Immediately update the .NET SDK/Runtime and Visual Studio to the latest patched versions

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse