Skip to content

Vendor

Unitronics vulnerabilities

10 published CVES affecting Unitronics, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
10
Critical
4
High
5
Medium
1
Low
0
Unscored
0
CISA KEV
1
Atom feed of Unitronics alerts

Products

Latest Unitronics CVEs

Newest publication first

  2. CVE-2026-45451 Unitronics - CWE-287: Improper Authentication

    Published
    HighCVSS 8.3

    : Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.

  5. CVE-2023-6448 Unitronics VisiLogic uses a default administrative password

    Published
    CriticalCVSS 9.8 EPSS 2.1% CISA KEV added 2023-12-11 Exploited in the wild

    Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.

  6. CVE-2023-2003 Embedded malicious code vulnerability in Unitronics Vision1210

    Published
    CriticalCVSS 9.1

    Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a client and executed...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.