UnifiedremoteCVEs & Vulnerabilities
2 CVEs affecting Unifiedremote products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
2 CVEs→ All vendors
Most Affected Products
unified remote 2
CVE-2023-52252CRITICAL
Unified Remote 3.13.0 allows remote attackers to execute arbitrary Lua code because of a wildcarded Access-Control-Allow-Origin for the Remote upload endpoint.
30 Dec 2023
9.8
CVSS
CVE-2022-3229CRITICAL
Because the web management interface for Unified Intents' Unified Remote solution does not itself require authentication, a remote, unauthenticated attacker can change or disable authentication requirements for the Unified Remote protocol, and leverage this now-unauthenticated access to run code of the attacker's choosing.
7 Feb 2023
9.8
CVSS
← PrevPage 1 / 1Next →