UN
Vendor
Unitronics
36
CVEs
18
On KEV
4
New 30D
Products
UU8.3
Unitronics UniStream Pro/UniLogic
Unitronics
4 CVEs0 on KEV4 new
VI9.8
VisiLogic
Unitronics
2 CVEs1 on KEV0 new
VF9.8
Vision1210 Firmware
Unitronics
2 CVEs1 on KEV0 new
S39.8
Samba 3.5 Firmware
Unitronics
1 CVEs1 on KEV0 new
S49.8
Samba 4.3 Firmware
Unitronics
1 CVEs1 on KEV0 new
S79.8
Samba 7 Firmware
Unitronics
1 CVEs1 on KEV0 new
VP9.8
Vision PLC and HMI
Unitronics
1 CVEs1 on KEV0 new
VF9.8
Vision1040 Firmware
Unitronics
1 CVEs1 on KEV0 new
VF9.8
Vision120 Firmware
Unitronics
1 CVEs1 on KEV0 new
VF9.8
Vision130 Firmware
Unitronics
1 CVEs1 on KEV0 new
VF9.8
Vision230 Firmware
Unitronics
1 CVEs1 on KEV0 new
VF9.8
Vision280 Firmware
Unitronics
1 CVEs1 on KEV0 new
VF9.8
Vision290 Firmware
Unitronics
1 CVEs1 on KEV0 new
VF9.8
Vision350 Firmware
Unitronics
1 CVEs1 on KEV0 new
VF9.8
Vision430 Firmware
Unitronics
1 CVEs1 on KEV0 new
VF9.8
Vision530 Firmware
Unitronics
1 CVEs1 on KEV0 new
VF9.8
Vision560 Firmware
Unitronics
1 CVEs1 on KEV0 new
VF9.8
Vision570 Firmware
Unitronics
1 CVEs1 on KEV0 new
VF9.8
Vision700 Firmware
Unitronics
1 CVEs1 on KEV0 new
UN9.8
Unilogic
Unitronics
8 CVEs0 on KEV0 new
VO9.8
Visilogic Oplc Ide
Unitronics
4 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-45452 | UU Unitronics UniStream Pro/UniLogic Unitronics | 8.3 | Oct 15 | Unitronics - CWE-134 Use of Externally-Controlled format string |
| CVE-2026-45451 | UU Unitronics UniStream Pro/UniLogic Unitronics | 8.3 | Oct 15 | Unitronics - CWE-287: Improper Authentication |
| CVE-2026-45450 | UU Unitronics UniStream Pro/UniLogic Unitronics | 8.3 | Oct 15 | Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer |
| CVE-2026-45449 | UU Unitronics UniStream Pro/UniLogic Unitronics | 8.3 | Oct 15 | Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') |
| CVE-2024-38435 | VI Visilogic Unitronics | 7.5 | Jul 21 | Unitronics Vision PLC – CWE-703: Improper Check or Handling of Exceptional Conditions may allow denial of service |
| CVE-2024-27774 | UN Unilogic Unitronics | 6.5 | Mar 18 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-259: Use of Hard-coded Password may allow disclosing Sensitive Information Embedded inside Device's Firmware |
| CVE-2024-27773 | UN Unilogic Unitronics | 8.8 | Mar 18 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow RCE |
| CVE-2024-27772 | UN Unilogic Unitronics | 8.8 | Mar 18 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-78: 'OS Command Injection' may allow RCE |
| CVE-2024-27771 | UN Unilogic Unitronics | 8.8 | Mar 18 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE |
| CVE-2024-27770 | UN Unilogic Unitronics | 8.8 | Mar 18 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-23: Relative Path Traversal |
| CVE-2024-27769 | UN Unilogic Unitronics | 8.8 | Mar 18 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor may allow Taking Ownership Over Devices |
| CVE-2024-27768 | UN Unilogic Unitronics | 9.8 | Mar 18 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE |
| CVE-2024-27767 | UN Unilogic Unitronics | 9.8 | Mar 18 | CWE-287: Improper Authentication may allow Authentication Bypass |
| CVE-2023-6448 In wildKEV | VI VisiLogic Unitronics | 9.8 | Dec 5 | Unitronics VisiLogic uses a default administrative password |
| CVE-2023-2003 | VF Vision1210 Firmware Unitronics | 9.8 | Jul 13 | Embedded malicious code vulnerability in Vision1210, in the build 5 of operating system version 4.3, which could allow a remote attacker to store base64-encoded malicious code in… |
| CVE-2016-4519 | VO Visilogic Oplc Ide Unitronics | 9.8 | Jun 25 | Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted filename field in a ZIP archive in a vlp… |
| CVE-2015-7939 | VO Visilogic Oplc Ide Unitronics | 9.6 | Jan 9 | Heap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers to execute arbitrary code via a long vlp filename |
| CVE-2015-7905 | VO Visilogic Oplc Ide Unitronics | – | Nov 13 | Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors |
| CVE-2015-6478 | VO Visilogic Oplc Ide Unitronics | – | Nov 13 | Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web… |
