Unitronics vulnerabilities
17 published CVEs name Unitronics among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 17
- Last 12 months
- 4
- Critical
- 4
- Known exploited
- 1
Critical 4High 11Medium 2Low 0Not scored 0
CVEs per yearBy the year they were published
- 20232
- 202411
- 20264
Known exploitedNewest addition to KEV first
- CVE-2023-6448
Unitronics VisiLogic uses a default administrative password
Unitronics · VisiLogic
ExploitedCritical9.8
Newest CVEs
- CVE-2026-45452
Unitronics - CWE-134 Use of Externally-Controlled format string
Unitronics · Unitronics UniStream Pro/UniLogic
High8.3 - CVE-2026-45451
Unitronics - CWE-287: Improper Authentication
Unitronics · Unitronics UniStream Pro/UniLogic
High8.3 - CVE-2026-45450
Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Unitronics · Unitronics UniStream Pro/UniLogic
High8.3 - CVE-2026-45449
Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Unitronics · Unitronics UniStream Pro/UniLogic
High8.3 - CVE-2024-38435
Unitronics Vision PLC - CWE-703: Improper Check or Handling of Exceptional Conditions
Unitronics · Vision PLC
Medium6.5 - CVE-2024-38434
Unitronics Vision PLC - CWE-676: Use of Potentially Dangerous Function
Unitronics · Vision PLC
Medium6.5 - CVE-2024-1480
Unitronics Vision Standard Unauthenticated Password Retrieval
Unitronics · Vision230
High7.5 - CVE-2024-27774
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-259: Use of Hard-coded Password
Unitronics · Unistream Unilogic
High7.5 - CVE-2024-27773
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-348: Use of Less Trusted Source
Unitronics · Unistream Unilogic
High8.8 - CVE-2024-27772
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-78: 'OS Command Injection'
Unitronics · Unistream Unilogic
High8.8