CVE-2015-6478
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls...
CVE-2015-6478 is a medium vulnerability (CVSS 6.8) in Unitronics Visilogic Oplc Ide, published November 13, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.55%, the 75th percentile. No source names a fixed version.
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site.
Exploit likelihood
What each source reports
NVD Score used
6.8
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site.
- Record
CVE-2015-6478- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-284
- Updated
- 2026-11-02
CVE List No score
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site.
- Record
CVE-2015-6478- Updated
- 2026-11-02
EUVDEUVD-2015-6419 No score
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site.
- Record
EUVD-2015-6419- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5xgg-fgqr-5m89 No score
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls...
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site.
- Record
GHSA-5xgg-fgqr-5m89- Weakness
- CWE-284
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
zerodayinitiative.com/advisories/ZDI-15-578
zerodayinitiative.com/advisories/ZDI-15-579
zerodayinitiative.com/advisories/ZDI-15-580
ics-cert.us-cert.gov/advisories/ICSA-15-274-02
zerodayinitiative.com/advisories/ZDI-15-573
zerodayinitiative.com/advisories/ZDI-15-577
securityfocus.com/bid/77571
nvd.nist.gov/vuln/detail/CVE-2015-6478
github.com/advisories/GHSA-5xgg-fgqr-5m89