What’s Vulnerable › Vulnerabilities

CVE-2024-36246

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-31 · updated 2026-06-17
• Weakness: CWE-862

Description

Missing authorization vulnerability exists in Unifier and Unifier Cast. If this vulnerability is exploited, arbitrary code may be executed with LocalSystem privilege. As a result, a malicious program may be installed, data may be altered or deleted.

Affected products

• Yokogawa Rental Lease Corporation Unifier: from 5.0
• Yokogawa Rental Lease Corporation Unifier Cast: from 5.0

References

• https://jvn.jp/en/jp/JVN17680667/
• https://www.yrl.com/fwp_support/info/khvu7f00000000q7.html
• https://www.yrl.com/fwp_support/info/khvu7f00000007j8.html
• https://www.yrl.com/fwp_support/info/khvu7f0000000auf.html
• https://jvn.jp/en/jp/JVN17680667/
• https://www.yrl.com/fwp_support/info/khvu7f00000000q7.html

Get alerted when CVE-2024-36246 or the next vulnerability affects your stack