Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow RCE
Solution:
The product has two different sources of the same data or information, but it uses the source that has less support for verification, is less trusted, or is less resistant to attack.
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
| Link | Tags |
|---|---|
| https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0 | third party advisory |
| https://claroty.com/team82/blog/new-critical-vulnerabilities-in-unitronics-unistream-devices-uncovered | third party advisory |