Unitronics.VisiLogic.OPLC.IDE.IPWorksSSL.Memory.Corruption

Description

This indicates an attack attempt against a Remote Code Execution vulnerability in Unitronics, VisiLogic OPLC IDE and UniDownloader.
The vulnerability, which is located in an ActiveX control, can be exploited through a vulnerable method. An attacker can exploit this by tricking an unsuspecting user into visiting a malicious webpage and execute arbitrary code within the context of the users' browser.

Affected Products

Unitronics VisiLogic OPLC prior to V9.8.00
Unitronics UniDownloader prior to V5.0.24

Impact

System Compromise: Remote attackers can execute arbitrary code within the context of the target user's browser

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
http://www.unitronics.com/support/downloads

References