← Database

CVE-2023-2003

CRITICAL CVSS: 9.1 Published: 2023-07-13 Modified: 2026-06-17

Description

Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a client and executed on the device.

Affected Platforms

Unitronics Vision1210 FirmwareUnitronics Vision1210

Weakness Type

CWE-506, NVD-CWE-Other

References