Description
: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.

This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
Published: 2026-10-15
Score: 8.3 High
EPSS: < 1% Very Low
KEV: No
Impact: Memory buffer overrun that may enable arbitrary code execution or denial of service
Action: Immediate Patch
AI Analysis

Impact

Unitronics UniLogic software and UniStream Pro firmware contain a buffer overrun flaw classified as CWE-119. The vulnerability can lead to uncontrolled memory writes when the software processes certain inputs, which may allow an attacker to corrupt data, crash the system or gain arbitrary code execution.

Affected Systems

The flaw impacts Unitronics UniStream Pro versions B10 and C10 and any associated UniLogic installations older than version 1.41.329. No other product versions or vendors are listed as affected.

Risk and Exploitability

The CVSS score of 8.3 signals a high severity risk, while the EPSS score of less than 1% indicates a low current exploit probability. The vulnerability is not in the CISA KEV catalog. Because the advisory does not specify the attack vector, it can be inferred that the buffer overflow may be triggered by malformed input sent over the device's control interface, possibly from a local or remotely reachable network.

Generated by OpenCVE AI on October 16, 2026 at 20:29 UTC.

Remediation

Vendor Solution

Upgrade UniLogic and UniStream to version 1.42.220 or above


OpenCVE Recommended Actions

  • Upgrade UniLogic and UniStream to version 1.42.220 or newer.
  • Restrict network access to the UniStream Pro devices, limiting connections to trusted hosts using firewalls or network segmentation.
  • Monitor device logs for abnormal activity or repeated buffer overrun errors and roll out the patch as soon as feasible.

Generated by OpenCVE AI on October 16, 2026 at 20:29 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 19 Oct 2026 13:30:00 +0000

Type Values Removed Values Added
First Time appeared Unitronics
Unitronics unistream Unilogic
Vendors & Products Unitronics
Unitronics unistream Unilogic

Thu, 15 Oct 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Thu, 15 Oct 2026 15:45:00 +0000

Type Values Removed Values Added
Description : Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only (B10 / C10) – UniLogic versions prior to 1.41.329.
Title Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Weaknesses CWE-119
References
Metrics cvssV3_1

{'score': 8.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L'}


Subscriptions

Unitronics Unistream Unilogic
cve-icon MITRE

Status: PUBLISHED

Assigner: INCD

Published:

Updated: 2026-10-15T18:01:17.303Z

Reserved: 2026-05-12T15:11:23.921Z

Link: CVE-2026-45450

cve-icon Vulnrichment

Updated: 2026-10-15T18:01:11.979Z

cve-icon NVD

Status : Deferred

Published: 2026-10-15T16:18:11.617

Modified: 2026-10-16T19:56:15.773

Link: CVE-2026-45450

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-19T13:06:38Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer