CyberSecBulletin

Uci vulnerabilities

We track 4 vulnerabilities in Uci products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 22, 2024.

4vulnerabilities
4critical
0high
0exploited
9.6average CVSS score

Latest Uci vulnerabilities

  • 9.8 Critical severity

    An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12.

    CVE-2024-45169UciEPSS 1.38%

    An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) a

  • 9.1 Critical severity

    idol_2: Missing Authorization

    CVE-2024-45168Uci

    An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is transferred over a raw socket without any authentication mechanism. Thus, communication endpoints are not verifiable.

  • 9.8 Critical severity

    An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12.

    CVE-2024-45167UciEPSS 1.21%

    An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) a

  • 9.8 Critical severity

    idol_2: Uncontrolled Resource Consumption

    CVE-2024-45166UciEPSS 1.05%

    An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) a