Unitronics
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any Unitronics product.
RSS Feeds for Unitronics security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in Unitronics products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by Unitronics Sorted by Most Security Vulnerabilities since 2018
Known Exploited Unitronics Vulnerabilities
The following Unitronics vulnerabilities have been marked by CISA as Known to be Exploited by threat actors.
| Title | Description | Added |
|---|---|---|
| Unitronics Vision PLC and HMI Insecure Default Password Vulnerability |
Unitronics Vision Series PLCs and HMIs ship with an insecure default password, which if left unchanged, can allow attackers to execute remote commands. CVE-2023-6448 Exploit Probability: 2.1% |
December 11, 2023 |
By the Year
In 2026 there have been 4 vulnerabilities in Unitronics with an average score of 8.3 out of ten. Unitronics did not have any published security vulnerabilities last year. That is, 4 more vulnerabilities have already been reported in 2026 as compared to last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 4 | 8.30 |
| 2025 | 0 | 0.00 |
| 2024 | 9 | 8.62 |
| 2023 | 1 | 9.80 |
It may take a day or so for new Unitronics vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Unitronics Security Vulnerabilities
| CVE | Date | Vulnerability | Products |
|---|---|---|---|
| CVE-2026-45452 | Oct 15, 2026 |
Unitronics Pro/UniLogic Format String v.<Before 1.41.329 | B10/C10>Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) UniLogic versions prior to 1.41.329. |
|
| CVE-2026-45451 | Oct 15, 2026 |
Improper Auth in Unitronics UniStream Pro B10/C10 (pre-1.41.329): Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) UniLogic versions prior to 1.41.329. |
|
| CVE-2026-45450 | Oct 15, 2026 |
: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) UniLogic versions prior to 1.41.329. |
|
| CVE-2026-45449 | Oct 15, 2026 |
: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) UniLogic versions prior to 1.41.329. |
|
| CVE-2024-38435 | Jul 21, 2024 |
Unitronics Vision PLC: Improper Handling of Exceptional Conditions Enables DoSUnitronics Vision PLC CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service |
Vision Plc
Visilogic
|
| CVE-2024-27774 | Mar 18, 2024 |
Unitronics Unistream Unilogic <1.35.227 Hard-coded Password DisclosureUnitronics Unistream Unilogic Versions prior to 1.35.227 - CWE-259: Use of Hard-coded Password may allow disclosing Sensitive Information Embedded inside Device's Firmware |
Unilogic
|
| CVE-2024-27773 | Mar 18, 2024 |
Unitronics Unistream Unilogic RCE in <1.35.227 CVE-2024-27773Unitronics Unistream Unilogic Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow RCE |
Unilogic
|
| CVE-2024-27772 | Mar 18, 2024 |
Unitronics Unistream Unilogic OS Command Injection RCE (before 1.35.227)Unitronics Unistream Unilogic Versions prior to 1.35.227 - CWE-78: 'OS Command Injection' may allow RCE |
Unilogic
|
| CVE-2024-27771 | Mar 18, 2024 |
Unitronics Unistream Unilogic Path Traversal RCE before 1.35.227Unitronics Unistream Unilogic Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE |
Unilogic
|
| CVE-2024-27770 | Mar 18, 2024 |
Unitronics Unistream Unilogic Path Traversal <=1.35.227 (CVE-2024-27770)Unitronics Unistream Unilogic Versions prior to 1.35.227 - CWE-23: Relative Path Traversal |
Unilogic
|