CVE-2024-27773

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Unitronics Unistream Unilogic – Versions prior to 1.35.227 -

CWE-348: Use of Less Trusted Source may allow RCE

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-348 CWE-345

Affected software

Vendor	Product	Versions
Unitronics	Unistream Unilogic	>= All versions, < 1.35.227
unitronics	unistream_unilogic	< 1.35.227

References

https://claroty.com/team82/blog/new-critical-vulnerabilities-in-unitronics-unistream-devices-uncoveredThird Party Advisory
https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0Third Party Advisory
https://claroty.com/team82/blog/new-critical-vulnerabilities-in-unitronics-unistream-devices-uncoveredThird Party Advisory
https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0Third Party Advisory

Timeline

Published: Mar 18, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-277746.5Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-259: Use of Hard-coded Password may allow disclosing Sensitive Information CVE-2024-277757.2SysAid before version 23.2.14 b18 - CWE-918: Server-Side Request Forgery (SSRF) may allow exposing the local OS user's NTLMv2 hash CVE-2024-277769.8MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow Unauthenticated RCE CVE-2024-277788.8An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 4.4.0 thr CVE-2024-277796.7An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below, 4.CVE-2024-27786.1A vulnerability was found in Campcodes Online Marriage Registration System 1.0 and classified as problematic. Affected by this issue is some CVE-2024-277805.4Multiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilities [CWE-79] in FortiSIEM 7.1 all CVE-2024-277819.0An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 4.4.0 through CVE-2024-277829.8Multiple insufficient session expiration weaknesses [CWE-613] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an attacker to re-use sto CVE-2024-277838.8Multiple cross-site request forgery (CSRF) weaknesses [CWE-352] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an unauthenticated remo CVE-2024-277846.5Multiple Exposure of sensitive information to an unauthorized actor weaknesses [CWE-200] vulnerability in Fortinet FortiAIOps 2.0.0 may allo CVE-2024-277856.5An improper neutralization of formula elements in a CSV File [CWE-1236] vulnerability in Fortinet FortiAIOps 2.0.0 may allow a remote authen