The vulnerability allows an attacker to inject arbitrary operating system commands due to improper neutralization of special elements, classified as OS Command Injection. The weakness is present in Unitronics UniStream Pro and UniLogic before version 1.41.329, enabling an attacker to execute arbitrary commands on the host system, potentially compromising confidentiality, integrity, and availability.

Unitronics UniStream Pro versions B10 and C10 and UniLogic versions earlier than 1.41.329 are affected. These products are used in industrial automation and control systems, meaning the flaw could impact critical infrastructure deployments.

The CVSS score of 8.3 indicates high severity. The EPSS score of less than 1% suggests an extremely low likelihood of exploitation in the wild, and the vulnerability is not listed in CISA's KEV catalog. The attack vector, while not explicitly described, is likely user‑controlled input that is passed to an operating‑system command shell, making the flaw exploitable without authentication but potentially requiring network or remote access to the device.