Skip to content
OpenAdvisories

Vendor

Unitronics

17 known vulnerabilities.

4 results · Clear filters · Feed

  • Critical 9.8

    Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'

    Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE

  • Critical 10.0

    Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-287: Improper Authentication

    CWE-287: Improper Authentication may allow Authentication Bypass

  • Critical 9.8
    CVE-2023-6448 Exploited

    Unitronics VisiLogic uses a default administrative password

    Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.

    KEV Dec 11, 2023
  • Critical 9.1

    Embedded malicious code vulnerability in Unitronics Vision1210

    Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in the device's data tables via the PCOM protocol, which can then be retrieved by a…