Skip to content
OpenAdvisories

Vendor

Unitronics

17 known vulnerabilities.

11 results · Clear filters · Feed

  • High 8.3

    Unitronics - CWE-134 Use of Externally-Controlled format string

    Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.

  • High 8.3

    Unitronics - CWE-287: Improper Authentication

    : Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.

  • High 8.3

    Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

    : Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versio…

  • High 8.3

    Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

    : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10…

  • High 7.5

    Unitronics Vision Standard Unauthenticated Password Retrieval

    Unitronics Vision Standard line of controllers allow the Information Mode password to be retrieved without authentication.

  • High 7.5

    Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-259: Use of Hard-coded Password

    Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-259: Use of Hard-coded Password may allow disclosing Sensitive Information Embedded inside Device's Firmware

  • High 8.8

    Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-348: Use of Less Trusted Source

    Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow RCE

  • High 8.8

    Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-78: 'OS Command Injection'

    Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-78: 'OS Command Injection' may allow RCE

  • High 8.8

    Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-22: 'Path Traversal'

    Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE

  • High 8.8

    Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-23: Relative Path Traversal

    Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-23: Relative Path Traversal

  • High 8.8

    Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

    Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor may allow Taking Ownership Over Devices