Impact
Unitronics UniLogic software and UniStream Pro firmware contain a buffer overrun flaw classified as CWE-119. The vulnerability can lead to uncontrolled memory writes when the software processes certain inputs, which may allow an attacker to corrupt data, crash the system or gain arbitrary code execution.
Affected Systems
The flaw impacts Unitronics UniStream Pro versions B10 and C10 and any associated UniLogic installations older than version 1.41.329. No other product versions or vendors are listed as affected.
Risk and Exploitability
The CVSS score of 8.3 signals a high severity risk, while the EPSS score of less than 1% indicates a low current exploit probability. The vulnerability is not in the CISA KEV catalog. Because the advisory does not specify the attack vector, it can be inferred that the buffer overflow may be triggered by malformed input sent over the device's control interface, possibly from a local or remotely reachable network.
OpenCVE Enrichment