CVE Intelligence

Unitronics vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Unitronics products: 5 record(s), with severity, exploitation and fixes.

Unitronics UniStream Pro/UniLogic 4Vision280 Firmware 1Samba 7 Firmware 1Samba 4.3 Firmware 1Samba 3.5 Firmware 1Visilogic 1Vision120 Firmware 1Vision530 Firmware 1Vision290 Firmware 1Vision1210 Firmware 1Vision230 Firmware 1Vision130 Firmware 1Vision350 Firmware 1Vision430 Firmware 1Vision560 Firmware 1Vision570 Firmware 1Vision700 Firmware 1Vision1040 Firmware 1

Exploited only (KEV) →

CVE-2026-45452 High · 8.3 CWE-134 Oct 15, 2026
Unitronics - CWE-134 Use of Externally-Controlled format string
Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
CVE-2026-45451 High · 8.3 CWE-287 Oct 15, 2026
Unitronics - CWE-287: Improper Authentication
: Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
CVE-2026-45450 High · 8.3 CWE-119 Oct 15, 2026
Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
CVE-2026-45449 High · 8.3 CWE-78 Oct 15, 2026
Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
CVE-2023-6448 Critical · 9.8 KEV High · 60 CWE-798 Dec 5, 2023
Unitronics Vision PLC and HMI Insecure Default Password Vulnerability
Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.