Unitronics - vulnerabilities (CVEs)

21 CVEs in 38 products, 4 in the last 30 days, newest from 2026-10-15.

Products

• Unilogic - 8 CVEs
• Unistream Unilogic - 8 CVEs
• Unitronics Unistream Prounilogic - 4 CVEs
• Visilogic Oplc Ide - 4 CVEs
• Visilogic - 2 CVEs
• Vision1210 Firmware - 2 CVEs
• Vision Plc - 2 CVEs
• Samba 3.5 Firmware - 1 CVEs
• Samba 4.3 Firmware - 1 CVEs
• Samba 7 Firmware - 1 CVEs
• Vision1040 Firmware - 1 CVEs
• Vision120 - 1 CVEs
• Vision120 Firmware - 1 CVEs
• Vision1210 - 1 CVEs
• Vision130 Firmware - 1 CVEs
• Vision230 - 1 CVEs
• Vision230 Firmware - 1 CVEs
• Vision280 - 1 CVEs
• Vision280 Firmware - 1 CVEs
• Vision290 - 1 CVEs
• Vision290 Firmware - 1 CVEs
• Vision350 Firmware - 1 CVEs
• Vision430 Firmware - 1 CVEs
• Vision530 - 1 CVEs
• Vision530 Firmware - 1 CVEs
• Vision560 Firmware - 1 CVEs
• Vision570 Firmware - 1 CVEs
• Vision700 Firmware - 1 CVEs
• Samba 3.5 - 0 CVEs
• Samba 4.3 - 0 CVEs
• Samba 7 - 0 CVEs
• Vision1040 - 0 CVEs
• Vision130 - 0 CVEs
• Vision350 - 0 CVEs
• Vision430 - 0 CVEs
• Vision560 - 0 CVEs
• Vision570 - 0 CVEs
• Vision700 - 0 CVEs

Newest CVEs of Unitronics

• CVE-2026-45452 - CVSS 8.3 (high), 2026-10-15: Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream…
• CVE-2026-45451 - CVSS 8.3 (high), 2026-10-15: : Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics…
• CVE-2026-45450 - CVSS 8.3 (high), 2026-10-15: : Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects…
• CVE-2026-45449 - CVSS 8.3 (high), 2026-10-15: : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.…
• CVE-2024-38435 - CVSS 7.5 (high), 2024-07-21: Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service
• CVE-2024-38434 - CVSS 6.5 (medium), 2024-07-21: Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass
• CVE-2024-1480 - CVSS 7.5 (high), 2024-04-19: Unitronics Vision Standard line of controllers allow the Information Mode password to be retrieved without authentication.
• CVE-2024-27774 - CVSS 7.5 (high), 2024-03-18: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-259: Use of Hard-coded Password may allow disclosing Sensitive Information Embedded inside…
• CVE-2024-27773 - CVSS 8.8 (high), 2024-03-18: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow RCE
• CVE-2024-27772 - CVSS 8.8 (high), 2024-03-18: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-78: 'OS Command Injection' may allow RCE
• CVE-2024-27768 - CVSS 9.8 (critical), 2024-03-18: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE
• CVE-2024-27771 - CVSS 8.8 (high), 2024-03-18: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE
• CVE-2024-27767 - CVSS 10 (critical), 2024-03-18: CWE-287: Improper Authentication may allow Authentication Bypass
• CVE-2024-27770 - CVSS 8.8 (high), 2024-03-18: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-23: Relative Path Traversal
• CVE-2024-27769 - CVSS 8.8 (high), 2024-03-18: Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor may allow Taking Ownership…
• CVE-2023-6448 - CVSS 9.8 (critical), 2023-12-05: Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with…
• CVE-2023-2003 - CVSS 9.8 (critical), 2023-07-13: Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store…
• CVE-2016-4519 - CVSS 9.8 (critical), 2016-06-25: Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted filename field in a…
• CVE-2015-7939 - CVSS 9.6 (critical), 2016-01-09: Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename.
• CVE-2015-7905 - CVSS 7.5 (high), 2015-11-13: Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors.
• CVE-2015-6478 - CVSS 6.8 (medium), 2015-11-13: Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact…