CVE-2015-6478
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls...
CVE-2015-6478 is a medium vulnerability (CVSS 6.8) in Unitronics Visilogic Oplc Ide, published November 13, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.55%, the 75th percentile. No source names a fixed version.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 1.55%EPSS, 75th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site.
- Record
CVE-2015-6478- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-284
- Updated
- 2026-11-02
CVE ListNo score
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site.
- Record
CVE-2015-6478- Updated
- 2026-11-02
EUVDEUVD-2015-6419No score
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site.
- Record
EUVD-2015-6419- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5xgg-fgqr-5m89No score
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls...
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site.
- Record
GHSA-5xgg-fgqr-5m89- Weakness
- CWE-284
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
zerodayinitiative.com/advisories/ZDI-15-578
ics-cert.us-cert.gov/advisories/ICSA-15-274-02
securityfocus.com/bid/77571
nvd.nist.gov/vuln/detail/CVE-2015-6478
github.com/advisories/GHSA-5xgg-fgqr-5m89